Legal

# Cookie policy

What this website and the CubeMSP application store on your device, why, and how to change your choice.

- Updated 25/09/2026
- 5 min read
- For everyone

## The short version

- No cookies until you choose

This website sets no cookies unless you allow Google Analytics. Choose “Essential only” and nothing is sent to Google.

- Analytics only with your permission

If you allow it, Google Analytics 4 sets two cookies to count visits and pages. Advertising features are switched off.

- The app keeps you signed in

CubeMSP sets a strictly necessary session cookie when you sign in, and remembers your theme if you pick one. Nothing else.

- Change your mind at any time

Use Cookie settings in the footer of any page, or your browser settings.

A summary for convenience. The full text below is what applies.

## 1. What cookies are

Cookies are small text files that a website stores in your browser. Similar technologies, such as the browser’s local and session storage, work in much the same way, and this policy covers all of them. Under the Privacy and Electronic Communications Regulations (PECR), a website must ask for your consent before storing anything on your device, unless it is strictly necessary to provide a service you have asked for.

## 2. This website

cubemsp.co.uk sets no cookies unless you allow analytics. It carries no advertising, retargeting or social media tags, no session recording, and no embedded content from other sites that could set cookies of its own. Fonts, icons and images are served from our own servers.

When analytics is in use, a banner asks on your first visit whether to allow it. “Essential only” keeps the site free of cookies. “Allow analytics” lets Google Analytics set the `_ga` and `_ga_<container-id>` cookies. This is everything the website can store in your browser:

| Name | Type | Purpose | Duration |
| --- | --- | --- | --- |
| `cookie_consent` | Local storage - Remembers your choice | Records whether you chose “Allow analytics” or “Essential only”, so the banner does not ask again on every page. Written only when you choose. | Until you clear it |
| `visit_journey` | Session storage - Only sent if you enquire | Notes the page you arrived on and when, the site that sent you, any campaign tags and ad click IDs in that first link, the previous page and how many pages you have viewed. It stays in this tab and only reaches us if you send the enquiry form. | Until you close the tab |
| `_ga` | Cookie - Analytics, only if you allow it | Set by Google Analytics to tell one visitor from another, so that visits are counted rather than page loads. | Two years |
| `_ga_<container-id>` | Cookie - Analytics, only if you allow it | Set by Google Analytics to keep the state of your visit, such as when it started and how many pages you have viewed. | Two years |

`cookie_consent` and `visit_journey` are kept in your browser’s storage rather than set as cookies, so they are not sent to us as you browse. The note in `visit_journey` is only sent if you submit the enquiry form, when it is included with your message, as described in our [privacy policy](/legal/privacy-policy).

Our web server also keeps a standard log of requests. That is not a cookie and is covered by the privacy policy too.

## 3. Google Analytics

We use Google Analytics 4 to see which pages are useful and how people find the site. It is provided by Google Ireland Limited, with Google LLC, and it runs only if you allow it.

- The Google Analytics script only loads after you allow analytics. If you choose “Essential only”, nothing is sent to Google.
- `_ga` tells one visitor from another and `_ga_<container-id>` keeps the state of your visit. Both last two years unless you delete them.
- GA4 does not log or store IP addresses.
- Advertising features are off. The site tells Google not to use advertising storage, not to use your data for advertising and not to personalise ads.
- Google may process the data in the United States, under the UK Extension to the EU-US Data Privacy Framework.
- We keep analytics data for up to 14 months.

Google explains how it uses information from websites that use its services at [policies.google.com/technologies/partner-sites](https://policies.google.com/technologies/partner-sites).

## 4. The CubeMSP application

When you sign in to a CubeMSP workspace, the application stores the following. It is not used for analytics or advertising, and it is not shared with anyone else.

| Name | Type | Purpose | Duration |
| --- | --- | --- | --- |
| `cubemsp_session` | Cookie - Strictly necessary | Keeps you signed in to your workspace. Holds a random identifier that the server looks up; it contains no personal data. | Until you sign out, or 12 hours at most |
| `cubemsp_platform_session` | Cookie - Strictly necessary | The same, for Cube Systems staff signed in to platform administration. Never set for customers. | Until sign-out, or 8 hours at most |
| `cubemsp-theme` | Local storage - A choice you made | Remembers whether you picked the light or dark theme. Only written if you change it. | Until you clear it or return to the system setting |

Session cookies belong to the workspace address you sign in to and are never shared between workspaces, so one MSP’s workspace cannot read a session belonging to another. They are marked `HttpOnly`, so scripts on the page cannot read them, and `Secure`, so they only travel over an encrypted connection.

Everything in this table is either strictly necessary to provide the service you signed in for, or remembers a choice you made yourself, so PECR does not require consent for it.

### Signing in with Microsoft

If your workspace uses Microsoft single sign-on, you are sent to Microsoft to sign in. Microsoft sets its own cookies on its own domain, under its own privacy statement. We do not control them and cannot see them.

## 5. Changing your choice

You can change your analytics choice at any time using the **Cookie settings** link in the footer of every page, which appears whenever analytics is in use. Choosing “Essential only” there withdraws your consent: it stops Google Analytics and removes the `_ga` cookies it has set.

You can also view, block and delete cookies in your browser settings. Blocking them does not stop this website working. It will stop you signing in to CubeMSP, because the session cookie is how the application knows it is you. Clearing this site’s stored data means the banner asks you again on your next visit, and clearing the stored data for your workspace signs you out and resets your theme.

General guidance on managing cookies is available from the [Information Commissioner’s Office](https://ico.org.uk/for-the-public/online/cookies/).

## 6. Changes to this policy

We will update this page, and the date at the top, before we change what either the website or the application stores on your device.

Contact

## Questions about this document

Email us and a person will reply. For anything about data held in an MSP’s workspace, please contact that MSP first, as it decides how the data is used.

[Email us](mailto:hello@cubemsp.co.uk)
- **Company:** Cube Systems Limited, trading as CubeMSP

- **Company number:** [17220899](https://find-and-update.company-information.service.gov.uk/company/17220899), registered in England and Wales

- **Registered office:** Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP

- **Email:** [hello@cubemsp.co.uk](mailto:hello@cubemsp.co.uk)

- **Telephone:** [01234 672 617](tel:+441234672617)

- **ICO registration:** [ZC216972](https://ico.org.uk/ESDWebPages/Entry/ZC216972)

---

**URL:** https://cubemsp.co.uk/legal/cookies
