Cookie Policy
Last updated: 10 November 2026
Who is responsible
This website is operated by Louis Williams trading as Cyborg Group, a sole trader. Contact [email protected], 91 Cedar Way, Penarth, CF64 3PW, United Kingdom. See our Privacy Policy for personal information, providers and your rights.
Cookies, browser storage and choices
Cookies are small values stored by your browser. Session storage is similar browser storage, normally limited to a tab. PECR applies to storing or accessing information on your device, not just cookies.
Essential session security and the privacy-choice cookie keep requested functions and your choice working. Limited chat and display storage supports the guide you use. Detailed first-party analytics, persistent analytics IDs, GA4 and Microsoft Clarity need analytics permission. We do not enable advertising storage or personalisation.
Before a choice, narrow anonymous site-improvement totals may be collected without analytics cookies. A local session-storage ID never leaves the browser; the aggregate table has no visitor or session IDs, IP information or individual journey. The sole purpose is improving this website. We rely on the applicable PECR statistical-purpose exception, with clear information and a free right to object, and legitimate interests where UK GDPR applies. This is not a claim that analytics is strictly necessary.
Reject analytics stops all analytics, including anonymous totals. DNT and GPC browser signals also stop it and override an earlier acceptance. With JavaScript disabled, our analytics does not run.
Cookie settings
Use Cookie settings to reopen your choices, allow analytics or reject it. Accept and reject are equally available. You can withdraw consent at any time, without a fee or loss of access to the website.
We remember the choice for 180 days. Rejecting expires our analytics IDs and Funnel attribution, tells loaded providers to deny analytics and reloads the page without their scripts. Your browser may require you to clear cookies on Google or Microsoft domains directly. Withdrawal does not automatically delete earlier lawful records; contact us about erasure.
You can also delete or block storage through your browser settings. Blocking essential session cookies may stop forms or admin sign-in working.
Cookies and storage used by the suite
The durations below reflect our code. Persistent analytics cookie lifetimes are renewed where the script refreshes them; browsers may shorten or block them. A session cookie is distinct from tab session storage.
| Name | Provider or storage | Purpose | Category | Lifetime |
|---|---|---|---|---|
| cg_sid | Cyborg Group cookie | Secure session, CSRF-protected forms and admin authentication. Not an analytics ID. | Essential | Browser session |
| cg_analytics | Cyborg Group cookie | Remembers Allow or Reject analytics. | Essential privacy preference | 180 days |
| cg_av | Cyborg Group cookie | Random visitor ID for consented journeys. | Analytics, consent required | Default about 13 months, following the analytics retention setting |
| cg_as | Cyborg Group cookie | Random session link for consented, verified conversions. | Analytics, consent required | 30 minutes, renewed while the tab is active |
| cg_ft | Cyborg Group, Funnel cookie | First-touch source and campaign attribution. | Analytics, consent required | 90 days |
| cg.analytics.detail | Browser session storage | Consented tab state and sanitised first-touch source. | Analytics, consent required | Tab lifetime, replaced after a 30-minute navigation gap |
| cg.analytics.aggregate | Browser session storage | Local-only tab state for anonymous site-improvement totals. Its ID is not transmitted. | Narrow statistical-purpose storage, subject to opt-out | Tab lifetime |
| cg.ai.requested | Cyborg Group session storage | Remembers an explicit request to use the hosted guide, so the tab can resume it. | Requested chat function | Tab lifetime |
| cgc:<site key>:cid | Cyborg AI session storage | Random conversation ID for the requested guide. | Requested chat function | Tab lifetime |
| cgc:<site key>:log | Cyborg AI session storage | The last 16 chat entries. | Requested chat function | Tab lifetime; new chat clears the local log |
| cgc:<site key>:state, cgc:<site key>:tour, cgc:<site key>:open | Cyborg AI session storage | Guide options, tour progress and open state. | Requested chat function | Tab lifetime |
| cg-log, cg-lead | Browser session storage, built-in fallback only | Recent chat and an unsent contact draft. The chat log keeps the last 12 entries. | Requested chat function | Tab lifetime; new chat clears the conversation and draft |
| cg-concierge, cg-quiet, cg-hints, cg-hint-at, cg-tour, cg-color, cg-shape, cg-open | Browser session storage, built-in fallback only | Guide state, tours and appearance preferences. | Guide function and appearance | Tab lifetime |
| _ga | Google Analytics 4, if enabled | Distinguishes browsers for consented analytics. | Analytics, consent required | Our integration sets about 13 months by default, not Google's two-year default |
| _ga_<measurement ID> | Google Analytics 4, if enabled | Persists analytics session state. | Analytics, consent required | Our integration sets about 13 months by default, following our retention setting |
| _clck | Microsoft Clarity, if enabled | Site-specific Clarity user ID and preferences. | Analytics, consent required | One year, according to Microsoft's published client source |
| _clsk | Microsoft Clarity, if enabled | Connects page views into a recording session. | Analytics, consent required | One day, according to Microsoft's published client source |
| _cltk | Microsoft Clarity session storage, if enabled | Identifies a browser tab. | Analytics, consent required | Tab lifetime |
GA4 and Clarity are used only when project IDs are configured and analytics permission is allowed. Our GA4 integration denies advertising storage, advertising user data and advertising personalisation and disables Google Signals. We do not currently collect Google Signals demographics. Clarity receives analytics permission with advertising storage denied; our integration masks forms and the concierge chat.
Our own analytics records page paths, time, scroll thresholds, device details and interactions. It records form field names, never their values. It stores truncated /24 IPv4 or /48 IPv6 prefixes and daily-salted hashes, not full IPs. Approximate country and city can be looked up in a local database, without sending your IP to an external geo provider. Detailed journeys and enquiry links need permission. See the Privacy Policy for the separate security, enquiry and server-log handling of full IPs.
Microsoft's additional published cookie list
Microsoft also documents the following cross-domain cookies. They are not a list of cookies that our integration necessarily sets. Advertising storage is denied and Bing advertising hosts are not allowed by our site's policy. Your browser and Microsoft's current implementation determine whether any are present. Microsoft does not publish fixed expiry durations for these entries in its current Clarity cookie documentation, so we do not invent them.
| Name | Provider | Published purpose | Category and use here | Published lifetime |
|---|---|---|---|---|
| CLID | Microsoft | Identifies the first time Clarity saw a browser on a Clarity site. | Provider cross-domain identifier; conditional, not guaranteed to be set | Not specified in Microsoft's Clarity cookie list |
| ANONCHK | Microsoft | Indicates whether MUID is transferred to advertising ID ANID. Microsoft says Clarity sets the flag to zero. | Provider flag; advertising storage denied here | Not specified in Microsoft's Clarity cookie list |
| MR | Microsoft | Indicates whether MUID needs refreshing. | Provider cross-domain flag; conditional | Not specified in Microsoft's Clarity cookie list |
| MUID | Microsoft | Browser identifier used across Microsoft for advertising, analytics and operations. | Not intentionally enabled for advertising here | Not specified in Microsoft's Clarity cookie list |
| SM | Microsoft | Synchronises MUID across Microsoft domains. | Provider cross-domain flag; conditional | Not specified in Microsoft's Clarity cookie list |
Cyborg AI product and admin storage
The default hosted Cyborg AI widget uses session-storage keys beginning cgc:<site key>: followed by cid, log, state, tour or open. They hold a random conversation ID, the last 16 chat entries, navigation state and tour progress for the browser tab. These support the chat service rather than our suite analytics. The hosted loader makes no third-party request before you open the guide unless you have allowed analytics and it preloads at idle. A previously requested tab can resume the guide. Rejecting website analytics does not disable the functional chat and tour records produced when you ask to use it. The product's admin area uses __Host-cgc over HTTPS, or cgc in local development, for sign-in, with an eight-hour idle limit and a browser-session cookie. The admin sign-in cookies are set on the separate product's domain, not by the public guide here. The built-in cg-* chat keys in the table apply only if we fall back to the old guide.
The hosted product can save limited chat messages, events and submitted enquiries server-side. Anthropic's Claude API may process questions and selected website information to answer them. Browser lifetime is not the same as server-record retention. See our Privacy Policy and, on a client site, that client's notice.
Retention and sources
Our first-party analytics retention defaults to 13 calendar months. Google and Microsoft have their own settings and schedules, which our purge cannot control. Microsoft's Clarity documentation describes 30-day playback retention and up to nine months for click and heatmap data and labelled or favourited sessions. Browser cookie expiry does not prove that a provider has erased server-side data.
Official sources checked on 10 November 2026:
- Google Analytics cookie usage and GA4 cookie expiry configuration.
- Microsoft Clarity cookies, official Clarity lifetime constants and Clarity data retention.
- ICO guidance on PECR exceptions.
Questions and complaints
Email [email protected] about choices, access or erasure. You may also complain to the Information Commissioner's Office, the UK's independent regulator. See the Privacy Policy for the full explanation of your rights.