Cookie Policy
Consent policy version 1.0. Last updated 9 September 2026.
What are cookies?
Cookies are small text files placed on your device when you visit a website. This policy also covers similar technologies such as browser local storage and session storage.
Optional technologies are blocked until you consent
When you first visit this website, no analytics or marketing technology is downloaded or run. Google Analytics 4, Microsoft Clarity and the HubSpot visitor tracking script load only after you accept the matching category. If you reject them, or you make no choice, those scripts are never requested and no analytics event is sent.
Strictly necessary technologies always operate. They are limited to routing, security, rate limiting, form protection, the campaign context attached to an enquiry you choose to submit, and the record of your cookie choice.
Strictly necessary
Always active. These cannot be switched off.
| Name | Provider | Party | Purpose | Storage | Duration |
|---|---|---|---|---|---|
| dv_consent_v1 | DefendVista | First party | Records your cookie choice, the consent version, the time of the choice and where it was made. | Browser local storage | 180 days, after which you are asked again |
| dv_attribution_v1 | DefendVista | First party | Remembers the page you arrived on, the referring website and any campaign parameters in the link you followed, so an enquiry you submit reaches us with the right context. | Browser session storage | Cleared when you close the browser tab |
| dv_score_visited_v1 | DefendVista | First party | Prevents the same page being counted more than once by our internal enquiry-handling process. | Browser session storage | Cleared when you close the browser tab |
| CSRF and rate-limiting tokens | DefendVista and our hosting provider | First party | Form protection, abuse prevention, rate limiting and request routing. Required for forms to submit safely. | Cookies and request headers | Session, or short-lived per request |
Analytics
Optional and off by default. Durations shown are the provider defaults; cookies are only set after you accept this category.
| Name | Provider | Party | Purpose | Storage | Duration |
|---|---|---|---|---|---|
| _ga, _ga_<container> | Google Analytics 4 (Google) | Third party | Measures page views and defined website events so we can understand how the site is used. | Cookies | Up to 2 years (Google default) |
| _clck | Microsoft Clarity (Microsoft) | Third party | Links website usage to a Clarity identifier for aggregate usage analysis. | Cookie and local storage | Up to 1 year (Microsoft default) |
| _clsk, CLID | Microsoft Clarity (Microsoft) | Third party | Groups a visit into a single session for usage analysis. | Cookies | 1 day (_clsk), up to 1 year (CLID) |
Marketing
Optional and off by default. This category covers HubSpot visitor tracking only. Sending a form to us does not require this category: forms are processed through our own secure server-side process.
| Name | Provider | Party | Purpose | Storage | Duration |
|---|---|---|---|---|---|
| hubspotutk, __hstc, __hssrc, __hssc | HubSpot | Third party | HubSpot visitor tracking. Links website visits to an enquiry record in our CRM. | Cookies | Up to 6 months (hubspotutk and __hstc), session (__hssrc), 30 minutes (__hssc) |
Accepting, rejecting and changing your choice
The banner shown on your first visit offers Accept analytics, Reject non-essential and Manage preferences, with equal prominence. You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page, which reopens the preference centre.
Your choice is stored for up to 180 days. We ask again when that period expires, when the consent version changes materially, when we introduce a new tracking purpose or provider, or if you clear your browser storage. When you withdraw analytics consent we stop further optional tracking and delete the optional cookies we are able to remove from your browser.
You can also block or delete cookies in your browser settings, but that is not the only control available: the preference centre on this website governs whether the optional scripts load at all.
Browser privacy signals
If your browser sends a Global Privacy Control signal, we treat it as a rejection of the marketing category and that category stays switched off. We do not currently act on the Do Not Track browser setting, and we make no claim about its legal effect.
Contact
Questions about cookies can be sent to hello@defendvista.com.