Cookie policy

1. What cookies are

Cookies are small text files that a website stores in your browser. Similar technologies, such as the browser’s local and session storage, work in much the same way, and this policy covers all of them. Under the Privacy and Electronic Communications Regulations (PECR), a website must ask for your consent before storing anything on your device, unless it is strictly necessary to provide a service you have asked for.

2. This website

cubemsp.co.uk sets no cookies unless you allow analytics. It carries no advertising, retargeting or social media tags, no session recording, and no embedded content from other sites that could set cookies of its own. Fonts, icons and images are served from our own servers.

When analytics is in use, a banner asks on your first visit whether to allow it. “Essential only” keeps the site free of cookies. “Allow analytics” lets Google Analytics set the _ga and _ga_<container-id> cookies. This is everything the website can store in your browser:

What this website can store in your browser
Name	Type	Purpose	Duration
`cookie_consent`	Local storage Remembers your choice	Records whether you chose “Allow analytics” or “Essential only”, so the banner does not ask again on every page. Written only when you choose.	Until you clear it
`visit_journey`	Session storage Only sent if you enquire	Notes the page you arrived on and when, the site that sent you, any campaign tags and ad click IDs in that first link, the previous page and how many pages you have viewed. It stays in this tab and only reaches us if you send the enquiry form.	Until you close the tab
`_ga`	Cookie Analytics, only if you allow it	Set by Google Analytics to tell one visitor from another, so that visits are counted rather than page loads.	Two years
`_ga_<container-id>`	Cookie Analytics, only if you allow it	Set by Google Analytics to keep the state of your visit, such as when it started and how many pages you have viewed.	Two years

cookie_consent and visit_journey are kept in your browser’s storage rather than set as cookies, so they are not sent to us as you browse. The note in visit_journey is only sent if you submit the enquiry form, when it is included with your message, as described in our privacy policy.

Our web server also keeps a standard log of requests. That is not a cookie and is covered by the privacy policy too.

3. Google Analytics

We use Google Analytics 4 to see which pages are useful and how people find the site. It is provided by Google Ireland Limited, with Google LLC, and it runs only if you allow it.

The Google Analytics script only loads after you allow analytics. If you choose “Essential only”, nothing is sent to Google.
_ga tells one visitor from another and _ga_<container-id> keeps the state of your visit. Both last two years unless you delete them.
GA4 does not log or store IP addresses.
Advertising features are off. The site tells Google not to use advertising storage, not to use your data for advertising and not to personalise ads.
Google may process the data in the United States, under the UK Extension to the EU-US Data Privacy Framework.
We keep analytics data for up to 14 months.

Google explains how it uses information from websites that use its services at policies.google.com/technologies/partner-sites.

4. The CubeMSP application

When you sign in to a CubeMSP workspace, the application stores the following. It is not used for analytics or advertising, and it is not shared with anyone else.

What the CubeMSP application stores
Name	Type	Purpose	Duration
`cubemsp_session`	Cookie Strictly necessary	Keeps you signed in to your workspace. Holds a random identifier that the server looks up; it contains no personal data.	Until you sign out, or 12 hours at most
`cubemsp_platform_session`	Cookie Strictly necessary	The same, for Cube Systems staff signed in to platform administration. Never set for customers.	Until sign-out, or 8 hours at most
`cubemsp-theme`	Local storage A choice you made	Remembers whether you picked the light or dark theme. Only written if you change it.	Until you clear it or return to the system setting

Session cookies belong to the workspace address you sign in to and are never shared between workspaces, so one MSP’s workspace cannot read a session belonging to another. They are marked HttpOnly, so scripts on the page cannot read them, and Secure, so they only travel over an encrypted connection.

Everything in this table is either strictly necessary to provide the service you signed in for, or remembers a choice you made yourself, so PECR does not require consent for it.

Signing in with Microsoft

If your workspace uses Microsoft single sign-on, you are sent to Microsoft to sign in. Microsoft sets its own cookies on its own domain, under its own privacy statement. We do not control them and cannot see them.

5. Changing your choice

You can change your analytics choice at any time using the Cookie settings link in the footer of every page, which appears whenever analytics is in use. Choosing “Essential only” there withdraws your consent: it stops Google Analytics and removes the _ga cookies it has set.

You can also view, block and delete cookies in your browser settings. Blocking them does not stop this website working. It will stop you signing in to CubeMSP, because the session cookie is how the application knows it is you. Clearing this site’s stored data means the banner asks you again on your next visit, and clearing the stored data for your workspace signs you out and resets your theme.

General guidance on managing cookies is available from the Information Commissioner’s Office.

6. Changes to this policy

We will update this page, and the date at the top, before we change what either the website or the application stores on your device.

The short version