Cookie policy

_session_id

Microsoft Forms use it to maintain session context for users when not logged in.

Session

ASP.NET_SessionId

Used to manage user sessions on a website built with ASP.NET technology, and maintaining a consistent and secure browsing experience.

Session

dfqtmhApplicationGatewayAffinityCORS

Used by the Windows Azure Application Gateway in addition to ApplicationGatewayAffinity to maintain sticky session even on cross-origin requests.

Session

dfqtmhApplicationGatewayAffinity

Specifically used for maintaining user sessions in a load-balanced environment, improving performance and user experience.

Session

ARRAffinitySameSite

Used by websites hosted on Microsoft Azure to ensure user requests are routed to the same server within a session.

Session

CookieControl

Civic UK - Consent management.

1 year

__cf_bm

Cloudflare's bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions.

30 minutes

__cfduid

The '__cfduid' cookie is set by the CloudFlare service to identify trusted web traffic. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable data.

5 years

__cflb

When enabling session affinity with Cloudflare Load

Balancer, Cloudflare sets a __cflb cookie with a unique value on the first response to the requesting client. Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new __cflb cookie to direct future requests to the failover pool.

30 minutes

__cfruid

Used by the content network, Cloudflare, to identify trusted web traffic.

Session

_cfuvid

The _cfuvid cookie is only set when a site uses this

option in a Rate Limiting Rule and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address.

Session

cf_chl_2

Used by Cloudflare for the execution of JavaScript or

Captcha challenges. These cookies are not used for

tracking or beyond the scope of the challenge.

Session

cf_clearance

Whether a CAPTCHA or JavaScript challenge has been solved.

1 year

JSESSIONIDCORS

Helps identify a user's session and associate it with the server's session data.

Session

JSESSIONID

Tracks session in cross-origin requests in Java-based apps.

Session

5ca76fe8-dedb-4acd-89ea-7f6c1a4608e1:www.moneyhelper.org.uk

It is used by WhosOn web chat for persistent personalisation across sessions.

8 hours

f9681567-c2fa-4f5dbb56-0e945eab3e19:www.moneyhelper.org.uk

It is used by WhosOn web chat for persistent personalisation across sessions.

8 hours

FormsWebSessionId

Microsoft Forms use it to maintain session context for users when not logged in.

hide

msal.cache.encryption

This cookie is dropped for sites where the Content Delivery Network is enabled. This cookie helps the CDN to identify if a page needs to be served from CDN cache or from web server. 

Session

_pension_guidance

Tracks when a customer rebooks an appointment after using the self-serve cancellation for Pension Wise appointments.

Session

_rad-consumer_session

Temporarily stores customer's chosen filters for the adviser search form.

Session

_ifa-directory_session

Maintains login for firm's principals during their signup and self-serve process.

Session

next-i18next

Temporarily stores customer's chosen locale.

1 year

saveBack

This cookie enables the 'Save and come back later' functionality within the Pension Wise digital appointment booking tool. It is used to store the path to the previous (save-and-return) page for future reference and the path/link for the back button.

Session

_iz_sd_ss_

It is used by Informizely to track whether a survey has already been shown during a session and to ensure better user experience by avoiding repeated prompts in the same session.

Session

_iz_uh_ps_

It is used by Informizely to track visitor history and engagement across visits, to ensure surveys are not shown repeatedly (throttling) and to help targeting surveys to new vs. returning users.

1-2 years

__RequestVerificationToken

Used by Microsoft Forms to prevent Cross-Site Request Forgery (CSRF) attacks by ensuring that the form request comes from the same origin.

Session

Dynamics365PortalAnalytics

Critical service cookie to analyse service usage anonymously and aggregated for statistical purpose. 

3 months

mhpdSessionConfig

Maintains a secure session for the MoneyHelper Pensions Dashboards service and controls time-limited access to your pension data during the journey. 

Session

beaconId 

This cookie is used to identify MoneyHelper Pensions Dashboards session anonymously and check that your device is allowed to access the service.

This cookie expires automatically after 90 days.

codeVerifier

This cookie helps the website confirm that the part you see (the front end) is properly connected to the behind-the-scenes services (the back end).

Session

iPlanetDirectoryPro

Gives you access to the Find your Pensions service without needing to log in again.

When you close your browser window, after 120 minutes, or after 15 minutes of inactivity, whichever occurs first.

amlbcookie

Ensures that your entire MoneyHelper Pensions Dashboard session is handled by the same server.

When you close your browser window, after 120 minutes, or after 15 minutes of inactivity, whichever occurs first.

route

Ensures that your You’re your Pensions requests all go to the same server.

When you close your browser window, after 120 minutes, or after 15 minutes of inactivity, whichever occurs first.

reentry

Tracks your journey after you log in with Welcome to GOV.UK OneLogin. 

15 minutes from when you re-enter the service from Welcome to GOV.UK One Login, or when you close your browser window. 

OAUTH_REQUEST_ATTRIBUTES

This is needed when you are directed to the Find your Pensions service from an authorised dashboard.

5 minutes from when you enter the service or when you close your browser window. 

SiteReferrer

PageReferrer

SearchTerm

FocusTime

BlurTime

ActionSetHistory

These are used for supporting certain targeting conditions, such as which website originally referred the site visitor. They are typically set in session storage, but in the event they are unavailable, cookies will be used as a fallback.

Set for a session. Set only if local and session storage is unavailable.

QSI_HistorySession

Used in lieu of the “Site History” cookie, for the same purpose (keeping track of the number page views as well as how long the visitor has been on the site).

Set only if “Use session storage” is enabled for the intercept browser storage settings. This is enabled by default.

QSI_OptInIDsAndWindowNames

QSI_OptInIDsAndTargetOrigins

These two keys contain the Intercept ID mapped to any PopUnder opened by said intercept, as well as a map from the Intercept ID to the page “origin” that it originally came from. This is then used to update the PopUnder with updated Embedded Data upon navigation (unload), with the origin being used as additional security for the cross-window postMessage targetOrigin field.

As long as the browser session.

Q_INTER

This value contains the unix timestamp of all of all intercept impressions made on the domain. Qualtrics uses these timestamps to decide whether or not to show another intercept when evaluating intercept targeting logic. The value is a JSON object with an Siid as the key and timestamp as the value.

N/A

QSI_QualtricsSurveyHistory

This value is used to prevent the same person from taking the same survey multiple times. Website / App Insights also uses this value to evaluate “survey has been taken” logic in action sets.

N/A

Site History

This cookie tracks the URLs of the web pages that the user visited. The pages must have the site intercept code snippet for tracking to work. By default, the maximum size is 2000 bytes, but you can specify a different size in your intercept settings.

Set for a session.

QSI_S_{ZoneID}

The cookie name is QSI_S_{ZoneID} and the value is “”{v|r}:{1}:{2}”” where “”v”” means visitor sampling,“”r”” means request sampling, variable 1 is the percentage (for the individual visitor), and variable 2 is the number of times the visitor has visited the site. For example {v:0:0} the sampling is enabled and the session was sampled-out. 

{v:100:0} means sampling is enabled and the session was sampled-in.

{r:10:45} means sampling is enabled, 10% of requests should be sampled, and the visitor is on their 45th request (visitors should be sampled in on their first visit and every 10th visit thereafter).

This cookie is persistent for 1 week.

QSI_SI_<id>_intercept

This cookie is used to track whether Qualtrics should display the intercept on repeated user visits. It is formatted as QSI_SI_<id>_intercept (ex: QSI_SI_5sPQdCDYYVYwQRv_intercept).

This cookie is persistent and expires based on “Repeated display prevention” intercept setting.

QSIPopUnder_PopUnderTarget_SI_<id>

“This cookie has the format QSIPopUnder_PopUnderTarget_SI_<id> (ex: QSIPopUnder_PopUnderTarget_SI_1Y2DkewovNRaQRv).

It helps Qualtrics prevent displaying another pop under if there is already one. This prevents multiple windows from crowding a site visitor.

Set for a session.

QST

Qualtrics surveys will add a persistent cookie (QST) that is used to prevent the same person from taking the same survey multiple times. Website / App Insights also uses this cookie to evaluate “survey has been taken” logic in action sets. See the Submitting Survey Sessions section for more information on how this cookie works.

Persistent for six months.

QSI_CT

This cookie is used for tracking events. It has a counter of each event and the number of times that event has occurred. For instance, if there are 2 different events that you are tracking, eventOne and eventTwo, and the first happens five times and the second only once, QSI_CT will look like ‘{“”eventOne””:5,””eventTwo””:1}’. Thus, if you want to reduce cookie size, it’s a good idea to keep your event names short. If the event tracker cookie exceeds the organization’s storage limit, further events will not be tracked.

Set for a session.

QSI_DATA

This cookie is used for cookie storage and will only be set if both session and local storage do not exist. It is extremely rare that session storage is not set in the browser window. QSI_DATA is rarely used.

Set only if the browser doesn’t have access to session or local storage.

QSI_ReplaySession_Throttled_<ZoneId>

This cookie is used to stop session creation and recording due to an encountered error. This value is a boolean. This cookie is ignored if it is a test session.

Persistent. Expires based on type of error:

Unexpected error: 60 seconds

Session is not live: 1 hour.

cookietest

This cookie is created simply to check if cookies are able to be created. It is deleted immediately after creation.

This cookie is deleted immediately after being set.

QSI_ReplaySession_Info_<ZoneId>

This cookie is used for identifying the session that is being recorded. This is necessary for recording page changes and reloads to be recorded on the same session. It contains information like sessionId, creationDataCenter, and sessionStartTime in a JSON format.

Set for a session.

Set only if session capture is enabled and a session is started. This cookie is set when starting session recording.

QSI_TestSessions_<ZoneId>

This cookie is used to determine whether the session is recorded in test session mode. A test session debugger will appear and sessions recorded will be identified by a test session label. This value is a boolean.

Set for a session.

Set only if session capture is enabled. This cookie is set when you test session replay. The cookie is removed when you exit test session mode.

CLID

Identifies when a user first visited a site using Microsoft Clarity.

1 year

SM

Microsoft Clarity session tracking.

Session

_clck

Microsoft Clarity - User behaviour tracking.

1 year

_clsk

Links together the different pages you visit during one visit, so your activity can be viewed as a single session to better understand how people use the site.  

Connects multiple page views by a user into a single Clarity session recording.

24 hours

ANONCHK

Indicates whether the MUID is transferred to other Microsoft domains for advertising, site analytics, and other operational purposes.

10 minutes

MR

Indicates whether to refresh MUID (Microsoft User ID).

13 months

MUID (Microsoft User ID) 

Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.

13 months

s_cc

Adobe Systems - Session tracking.

Session

AMCVS_*

Used by Adobe Marketing Cloud to indicate that a session is in progress.

Session

AMCV_*

Used by Adobe Marketing Cloud to store a unique visitor.

1 year

at_check

Adobe Systems - Session validation.

Session

demdex

Assigns a unique ID for audience segmentation across Adobe Experience Cloud services.

6 months

mbox

Adobe Systems - Personalisation and optimisation.

1 year

dpm

Handles ID syncing between Adobe systems.

6 months

s_ecid

Stores a unique Experience Cloud ID, which helps link your visits and activity across different parts of the website for analytics purposes.

2 years

s_sq

Used by Activity Map. It contains information about the previous link clicked by the visitor.

Session

s_vi

Stores a unique visitor ID and timestamp.

2 years

s_fid

Stores the fallback unique visitor ID and timestamp.

2 years

s_ac

Helps set other cookies correctly and is deleted right after it’s used.

Immediate

AMP_TOKEN

This cookie is associated with Google Analytics. It includes a token that can be used to retrieve a client ID from the AMP Client IDs service.

60 minutes

_ga_*

Used by Google Analytics to identify and track an individual session with a user device.

1 year

_ga

Unique user identifier.

1 year

_dc_gtm_*

Used by Google Tag Manager to load scripts related to Google Analytics.

58 seconds

_gat_*

Used by Google to limit collection of data on high traffic sites.

58 seconds

_gid

Unique session identifier.

24 hours

_utma 

Used by Google Analytics to track visitor behaviour and measure site performance. 

2 years

_cls_cfgver

Tracks the version of Glassbox’s configuration so the system updates settings when they change.

Session

_cls_v

Identifies a user across multiple sessions with a random Glassbox ID (not personal data).

3 years

_cls_s

Holds the session ID for recordings and sometimes marks if a visitor is new or returning.

Session

rto

Identifies the server cluster where session data is stored, keeping all data together.

Session

_cls_e

Stores a special session ID ensuring data maps to the right session.

Session

Bc

Helps track session recording and performance.

Session

_cls_subs

Ensures deduplication and accuracy in data collection when multiple instances are collected. 

Session

MUID

Microsoft user identifier for Clarity analytics.

1 year

MR

Tracks sessions and links Clarity data to Microsoft services.

7 days

SRM_B

Bing Ads retargeting and measurement.

1 year

_uetsid

Microsoft - User tracking.

24 hours

_uetvid

Microsoft - User tracking and analytics.

1 year

IDE

Used for targeted advertising and measuring ad campaign effectiveness. It helps tailor ads to your interests based on your browsing activity across different websites. This cookie doesn't identify you personally but rather builds an anonymous profile of your browsing behaviour to show you more relevant ad.

1 year

test_cookie

Tests if the browser accepts cookies for ad targeting.

15 minutes

_gcl_au

Google - Ad conversion tracking.

3 months

bcookie

Browser ID for LinkedIn tracking.

1 year

li_gc

Stores consent for cookies on LinkedIn.

6 months

lidc

Tracks data centre selection for load balancing.

24 hours

_fbp

Meta Platforms, Inc. - Advertising and tracking.

3 months

_ttp

ttcsid_

ttcsid_<pixel code>

ttclid

To measure and improve the performance of advertising campaigns and to personalize the customer experience (including ads) on TikTok.

13 months

_pangle

To measure and improve the performance of your advertising campaigns and to personalize the customer's ad experiences delivered by the TikTok Pangle ad network.

13 months

personalization_id

Identifies users for personalized Twitter content and ads.

1 year

muc_ads

Tracks engagement with Twitter ads.

1 year

YSC

This cookie is set by YouTube video service on pages with YouTube embedded videos to track views.

Session

VISITOR_INFO1_LIVE

It estimates bandwidth to determine whether the user receives the newer or older version of the YouTube player and tracks user interactions with embedded YouTube videos.

6 months

__Secure-ROLLOUT_TOKEN

Used by YouTube to manage the phased rollout of new features and updates. This cookie helps assign users to specific test groups for experimental features, such as changes to the user interface or video player. The __Secure- prefix indicates that the cookie is only transmitted over a secure HTTPS connection, enhancing data security.

6 months

__Secure-YNID

Used to detect and resolve problems with the service.

6 months