01The short version
Six cookies are needed for the site to work at all. They sign you in, remember your language, and remember your answer to the banner. They are set whatever you decide, because without them there is nothing here to decide about.
Everything else is analytics. We run no advertising, no remarketing and no profiling, so analytics is the only question we have.
Inside the European Economic Area, the United Kingdom and Switzerland, nothing analytical is stored until you allow it. Elsewhere it runs until you decline. The control at the foot of this page declines at any time.
02Strictly necessary
First-party, and not covered by the banner.
• access_token, refresh_token — keep you signed in. Not readable by scripts. 7 days.
• has_session — lets the page know a session may exist before it asks the server. 7 days.
• active_company_slug — which workspace is open. 30 days.
• x-lang — the language you are reading in. Expires when the browser closes.
• inite_consent — your answer to the banner, and the date of it. 183 days.
• inite_region — what your browser reported about where it is, so the server stops issuing analytics identifiers it was not entitled to issue. 183 days.
03Our own analytics
First-party, not readable by scripts, and set only where analytics is permitted. They exist so that an audit started on Tuesday and a purchase made on Friday can be recognised as the same person. Without them every sale reads as if it arrived from nowhere.
• vid — one anonymous visitor id. 1 year.
• vfirst — the channel that first brought you here. 1 year.
• vlast — the channel of the most recent visit that carried one. 1 year.
None of the three carries a name or an email address unless you give us one yourself somewhere else on the site.
04Google Analytics
Property G-6JF8T03SGM, loaded through Google Tag Manager. Consent Mode v2 defaults to denied in the European Economic Area, the United Kingdom and Switzerland, so the tags run without storing anything until you allow it.
• _ga — a browser id. 400 days.
• _ga_6JF8T03SGM — session state for this property. 400 days.
Advertising storage, advertising user data and advertising personalisation are set to denied everywhere and for everybody, including visitors who accept. We run no ads, and granting a signal for something that does not exist is how a site ends up consenting on your behalf to a product it adds a year later.
Event data is kept for 14 months. Google's own terms are at policies.google.com/technologies/cookies.
05Yandex Metrica
Counter 105879298, including Webvisor, which records the session: scrolling, pointer movement, and the structure of the page as you saw it.
Metrica has no consent mode. There is no signal that means “run without storing”, so the only honest control is whether it loads at all. Where consent is required, it does not load until you allow it.
First-party:
• _ym_uid — a browser id. 1 year.
• _ym_d — the date of the first visit. 1 year.
• _ym_isad — whether an ad blocker is present. 1 day.
• _ym_visorc — Webvisor session state. 30 minutes.
Yandex also writes cookies on its own domain when the counter loads: yandexuid, yuidss, ymex, i, bh and yabs-sid, up to 400 days. Those are Yandex's, on Yandex's domain, under Yandex's terms at yandex.com/legal/confidential.
06Where we ask, and how we decide
The banner appears in the European Economic Area, the United Kingdom and Switzerland.
Google resolves the country from the network address, so its consent signals are exact. Our own analytics and Yandex Metrica cannot see an address, so two weaker signals stand in for one: the browser's time zone, and whether its language settings name a country in scope.
Both are guesses, and they are wrong in different situations — a time zone is wrong for anyone travelling or behind a VPN, a language tag is wrong for anyone reading in a language they did not move for. Either one is enough to bring up the banner, because the case worth avoiding is somebody in the European Economic Area whose clock says otherwise.
The guess fails toward asking. An unrecognised European time zone counts as inside the region, not outside it: being asked unnecessarily costs a click, and not being asked costs the thing the law protects.
If the banner never appeared for you and you would rather the visit went uncounted, the control below is the same control.
07Changing your mind
The control at the foot of this page records a new answer immediately.
Withdrawing consent deletes the identifiers already issued, including the three only the server can delete, and stops new ones being issued. Anything already loaded into the page keeps running until you reload it, so reloading afterwards is the difference between stopping and having stopped.
Your browser can also block cookies for this site outright. Nothing here depends on being measured, so blocking them costs you nothing beyond staying signed in.