Legal · Effective September 26, 2026
Cookie Policy
This policy lists the cookies and similar browser storage used by this website (captivahq.com) and by the CaptivaHQ application, what each one is for, how long it lasts, and how to control it. The Privacy Policy explains how we handle the underlying data.
1. The short version
- This website sets no cookie at all until you choose Accept on the cookie banner. Decline, or a browser that sends Do Not Track, and no analytics or advertising tag ever loads.
- The application uses only strictly necessary cookies — to keep you signed in, protect sign-in and remember your language. It sets no analytics or advertising cookies.
2. Categories
- Strictly necessary. Needed for a page or feature you asked for to work, such as signing in or submitting a form. They do not need consent and cannot be switched off in our banner.
- Analytics. Measure how visitors find and use the website. Set only with your consent.
- Advertising. Attribute an enquiry to the advert that produced it. Set only with your consent. We do not run remarketing audiences.
3. Cookies on this website
| Name | Provider | Category | Purpose | Lifetime |
|---|---|---|---|---|
captivahq-consent (local storage) | CaptivaHQ | Necessary | Remembers whether you accepted or declined, so we do not ask again | Until you clear site data |
| Turnstile challenge storage | Cloudflare | Necessary | Tells a person from an automated script when you submit the registration form | For the duration of the challenge |
_ga | Google Analytics 4 | Analytics | Distinguishes visitors | 2 years |
_ga_<container-id> | Google Analytics 4 | Analytics | Keeps session state | 2 years |
_gcl_au | Google Ads | Advertising | Links a visit or enquiry to the ad click that led to it | 90 days |
Google may set further cookies of the same kinds on its own domains when its tags load. Google's lifetimes are set by Google and can change; the values above are Google's published defaults.
4. Cookies in the CaptivaHQ application
| Name | Category | Purpose | Lifetime |
|---|---|---|---|
session_token, session_token_prior | Necessary | Keep you signed in; the prior token lets a session rotate without logging you out | Until you sign out or the session expires |
captiva_login_continuation, captiva_otp_browser | Necessary | Carry a sign-in through its steps and recognise a browser that has completed a one-time code | Minutes to a few weeks |
google_oauth_state, google_oauth_pkce, ms_oauth_state, ms_oauth_pkce | Necessary | Protect single sign-on and integration connections with Google and Microsoft against forgery | Minutes, deleted when sign-in completes |
locale | Necessary | Remembers your language | Up to 1 year |
__Host-portal_session, __Host-portal_csrf, __Host-portal_otp_browser, __Host-portal_preview | Necessary | Sign-in, request-forgery protection and preview mode for the Client Portal | Until sign-out or expiry |
5. Your choices
- Change your mind on this website. Clear this site's data in your browser and the banner will ask again. Declining stops the tags from loading on your next visit.
- Do Not Track. A browser that sends Do Not Track is never shown the banner and never loads a tag.
- Browser controls. Every browser can block or delete cookies. Blocking strictly necessary cookies in the application will stop you signing in.
- Google's controls. You can also opt out of Google Analytics with Google's browser add-on and manage ad personalisation in your Google account.
6. Changes
We update this list whenever we add, remove or change a cookie, and change the effective date above. If we add a tag to this website, it will not load until you have been asked again.
Published for CaptivaHQ by United Technology Services Inc. · All documents: captivahq.com/legal. Questions: [email protected].