Your privacy choices

Strictly necessary — always on

These keep CIP working and secure, so they cannot be switched off. None of them is used for analytics or advertising.

• __Secure-cip.session_token — keeps you signed in. Holds only a random token. Lasts 7 days, renewed while you use CIP; deleted when you sign out.
• cip_staff_org — if you work for more than one business in CIP, remembers which one you chose. 30 days.
• cip_consent — remembers your choice on this page. 12 months if you accept, 6 months if you reject.
• Short-lived security cookies while you sign in with Google or Microsoft, or connect Xero. Deleted within minutes.
• Cloudflare Turnstile, on the sign-in page only — may set a short-lived cookie to tell people from bots.

Analytics and session recordings

Off unless you turn it on. If you turn it on:

• We set a cookie, cip_vid, holding a random code, so our own analytics can recognise this browser when you come back. 12 months.
• We keep a note, cip_seen, in this browser’s local storage holding the date you first arrived, so we can tell first-time visitors from people coming back. Only a yes-or-no answer ever leaves your device. Removed if you turn this off.
• We use PostHog, a product analytics service hosted in the EU (Frankfurt, Germany), which sets its own cookie (ph_…_posthog) on this website. 12 months. PostHog helps us see which pages work, where people get stuck, and how returning visitors use CIP, using heatmaps, funnels and session recordings.
• Session recordings replay clicks, scrolling and page changes. Anything you type is always hidden before it leaves your browser. Inside the signed-in app, all text on screen is hidden too. We never record admin pages, sign-in and sign-up pages, your account settings and purchases pages, the page shown after a template purchase, invitation links, shared reports or invoices.
• If you are signed in, PostHog knows you only by a coded id and your business’s account id. Never your name, email address or figures.

Saying no does not change anything else about CIP.

Checking this browser’s setting…

Your current choice

Checking this browser’s setting…

Changing your mind

Use the switch above and press “Save my choice”. It takes effect straight away. If you switch analytics off, we stop PostHog and remove cip_vid and PostHog’s cookie from this browser. Your choice is saved in this browser only, so set it on each browser or device you use. To have past recordings deleted, email info@commercialintelligencepartners.co.uk. We will delete any we can link to you.

How we count a visit

Every time a page loads we make a short code from four things: your IP address, your browser’s description of itself, the website address, and a random secret that we generate fresh each day. That code is what we store — the ingredients are used to make it and are then thrown away.

We never store your IP address or your browser description. Each day’s random secret is destroyed within 48 hours, so after that the code cannot be worked backwards — not even by us. And because the secret changes at midnight, the code you get on Tuesday has no relationship to the one you get on Wednesday, so we cannot follow you from one day to the next, or from one device to another.

Alongside it we record what you would expect a visitor counter to record: which page of ours you looked at, how long you stayed, how far down you scrolled, roughly where in the world you are (country, region and city, from the network, never a precise location), what kind of device and browser you used, and which website sent you to us. We keep the name of that website only — never the page on it you came from, and never anything it had attached to the link.

Nothing is stored in your browser for the basic count

Our cookieless visit count stores nothing on your device and reads nothing stored on it, apart from checking your own cookie choice and opt-out setting. It works only from what your browser sends with every request anyway. That is true whether you have not chosen yet or have rejected analytics cookies.

Only if you accept analytics cookies do we also keep a note, cip_seen, holding the date you first arrived. It is written once and never updated. On each page view your browser answers one yes-or-no question from it — has this browser visited on an earlier day? — and sends only that answer. The date itself never leaves your device. It is first-party, used for nothing but that one statistic, and never shared. Rejecting or withdrawing consent, or switching counting off below, removes it.

Don’t count this browser at all

Separately from the choice above, this stops even our cookieless visit count for this browser, so you are not counted at all, not even anonymously. It also switches off analytics cookies and session recordings.

Checking this browser’s setting…

CIP staff

Use this on every browser you work from, so your own visits are excluded from the figures. The admin console at /admin is never measured at all, but the public site and the customer app are — so a day of testing the landing page will otherwise show up as real traffic.