Your privacy choices.

Analytics and advertising

Here is exactly what is set today. Advertising: Microsoft Clarity, which records anonymized page interactions so we can see where this site confuses people and fix it. Clarity is sold as an analytics and session-replay tool, and seeing how this site is used is the only thing we use it for — but loading it places MUID on c.bing.com, an identifier Microsoft itself uses for advertising on its own services. We would rather label it by what it does than by what it is sold as, so it sits in Advertising, and the Advertising switch is what turns it off. Analytics: Google Analytics, which reports which pages are viewed and how people move through the site, in aggregate, so we can see what works. It sets first-party cookies on our own domain, and it does not set an advertising identifier, which is why it sits here rather than under Advertising. Google's advertising features are switched off for the property, and the property is not linked to a Google Ads account. Apart from Clarity, no ad or ad-measurement tag runs on any CNL surface, and we do not build or buy audiences, profiles, or retargeting lists.

What you allow on this browser

Analytics: Google Analytics. Switching this off stops the record of which pages you viewed reaching Google, and stops the first-party _ga cookies being set. Advertising — Microsoft Clarity. Switching this off stops the session recording of how pages are used, and stops Microsoft's MUID advertising identifier being set. Saved in a first-party cookie on this browser. Clearing your cookies clears the choice, and other browsers and devices keep their own.

Save choices →

What is actually stored

The complete list — everything, not a summary. Nothing on it is shared with a data broker. Everything Microsoft sets appears only while the advertising switch above is on, and switching that off is also what stops MUID being set: we run no ad-measurement tag and do not use Clarity for advertising, but installing Clarity does place a Microsoft identifier that Microsoft itself uses for advertising on its own services. That is why Clarity is classified as advertising and sits behind that switch rather than the analytics one. Outside that switch are the two strictly necessary entries, and the Google Analytics cookies, which sit behind the analytics switch instead.

cnl_privacy

Strictly necessary, first-party, set by CNL. Remembers the choice you make above. Expires after 1 year.

session

Strictly necessary. The Flask session cookie: carries the token that protects most of our forms, and keeps the signup flow's state. The tracking controls above are protected by an origin check instead, and set no cookie. Not optional, and it carries no tracking.

_ga / _ga_<container-id>

Google Analytics, website analytics, in the analytics category. First-party, set by Google Analytics on cnlsystems.com. _ga recognizes a returning browser (2 years), and _ga_<container-id> holds the session state for the current visit (2 years). Set only while the analytics switch above is on.

_clck / _clsk

Microsoft Clarity, session replay — in the advertising category. Recognizes a returning browser on this site (1 year) and joins the pages of one visit into a single session recording (1 day). Set only while the advertising switch above is on.

CLID

Microsoft Clarity, session replay — in the advertising category. Records the first time Clarity saw this browser on any site that uses Clarity, not just ours. Expires after 1 year. Set only while the advertising switch above is on.

ANONCHK / MR / SM / MUID

Microsoft, set on c.bing.com when Clarity loads: Microsoft's own browser identifier and the machinery that keeps it in sync. Microsoft states that MUID is used for advertising as well as site analytics and other operational purposes. MUID and ANONCHK last up to 1 year, MR 7 days, and SM until you close the browser. Set only while the advertising switch above is on.