Cookie Policy
This policy explains the cookies and similar technologies used on the Bizora website and application.
1. What are cookies?
Cookies are small text files placed on your device by a website. Similar technologies can remember a browser, maintain a secure session or help a service understand how it is used. This policy should be read with our Privacy Policy.
2. Cookies we currently use
| Name or type | Purpose | Category | Typical duration |
|---|---|---|---|
__Host-bizora_session (first party) | Maintains your secure session, protects forms and supports organisation-scoped access. Each website host has its own cookie; it is not shared across subdomains. | Strictly necessary | Browser session. Sign-in expires after 30 minutes of inactivity or 12 hours from authentication. Browser session-restore features may retain the cookie, but do not extend these server-side sign-in limits. |
| Security and CSRF session data | Helps prevent forged requests, protect forms and support login and rate-limit controls. Some values are held in the server session rather than as a separate browser cookie. | Strictly necessary | Session or as configured by the application. |
bizora_consent_v3 (first party) | Remembers whether you accepted or rejected optional cookies, so we do not ask on every page. | Strictly necessary | 6 months |
_ga (Google Analytics) | Distinguishes visitors so we can count visits and understand how our public website is used. Set only if you accept analytics cookies. | Analytics (consent required) | Up to 2 years |
_ga_<ID> (Google Analytics) | Keeps track of the current visit for the same purpose. Set only if you accept analytics cookies. | Analytics (consent required) | Up to 2 years |
_fbp (Meta Pixel) | Identifies your browser so we can measure whether our adverts on Facebook and Instagram lead to visits and sign-ups. Set only if you accept cookies. | Advertising measurement (consent required) | 3 months |
_fbc (Meta Pixel) | Records that you arrived by clicking one of our Facebook or Instagram adverts. Set only if you accept cookies. | Advertising measurement (consent required) | 3 months |
_clck (Microsoft Clarity) | Distinguishes visitors so Clarity can group page views from the same browser. Set only if you accept cookies. | Analytics (consent required) | 1 year |
_clsk (Microsoft Clarity) | Joins the pages you view in one visit into a single session recording. Set only if you accept cookies. | Analytics (consent required) | 1 day |
Google Analytics, and the Google tag that loads it from googletagmanager.com, run only on our public website pages, such as the homepage, feature and solution pages, pricing, the blog, updates and these policies, and only after you accept. They are never loaded on the Bizora sign-in, registration or invitation pages or inside your workspace. Google Analytics 4 does not log or store IP addresses; Google uses the IP address briefly to estimate an approximate location and then discards it. Google signals and ad personalisation are switched off. Google, as our provider, may process this information in the United States; see Google's Privacy Policy.
The same Google tag also measures our Google Ads, again only after you accept. When you arrive from one of our Google adverts, the advert's click identifier is kept in the address of the pages you visit and the sign-up form, rather than in a cookie. If you complete registration, our public welcome page tells Google Ads that a sign-up happened, with a random reference and no name or email address. Google advertising cookies are not set.
The Meta Pixel, loaded from connect.facebook.net, runs on the same public website pages and only after you accept. We use it to measure our adverts on Facebook and Instagram: it tells Meta which pages you viewed, when you clicked to sign up and, on our public welcome page, when you completed registration, so we can see which adverts work and show them to people likely to find Bizora useful. It is never loaded on the Bizora sign-in, registration or invitation pages or inside your workspace, and it never receives Customer Data. Meta Platforms Ireland Limited may combine this with information it holds about you if you use its services, and may transfer it to the United States; see Meta's Privacy Policy. We do not use localStorage or sessionStorage for optional preferences.
Microsoft Clarity, loaded from clarity.ms, runs on the same public website pages and only after you accept. It records how visitors move, click and scroll on a page so we can see where our website is confusing and improve it, and builds heatmaps from those recordings. Text you type into form fields is masked and never sent to Clarity. It is never loaded on the Bizora sign-in, registration or invitation pages or inside your workspace, and it never receives Customer Data. Microsoft may set its own cookies on clarity.ms and may process this information in the United States; see Microsoft's Privacy Statement.
3. Stripe and payment pages
When you choose a paid plan or add-on, you are redirected to Stripe-hosted Checkout, payment authentication or Customer Portal pages. Stripe may use cookies and similar technologies there. See Stripe's Cookie Policy and Stripe's Privacy Policy for their purposes, durations and controls. Bizora does not embed Stripe tracking on its ordinary pages or receive your full payment-card number.
4. Consent and legal basis
Strictly necessary cookies do not require consent where they are essential to provide a service you have requested, such as signing in, security, remembering your cookie choice or completing a billing action. Analytics and advertising-measurement cookies are optional: we ask for your consent with a banner that offers equally prominent Accept and Reject choices, and we do not set them unless you accept. The lawful basis for the related processing is your consent.
We use the same opt-in approach for every visitor, wherever you are. It meets the UK and EU rules on cookies, which are among the strictest in the world, and so also meets the requirements of countries with lighter rules. Rejecting analytics cookies never limits your access to our website or to Bizora.
5. Changing your choice and managing cookies
You can change or withdraw your analytics choice at any time. Withdrawing consent removes the Google Analytics, Microsoft Clarity and Meta Pixel cookies set on our website and stops further collection; it does not affect analytics collected before you withdrew.
You can also block or delete cookies through your browser settings. Blocking necessary cookies may prevent login, secure forms, workspace access or billing from working. Browser controls do not necessarily delete server-side session data or information already collected lawfully.
For information about personal-data rights, including access, deletion and objection, see our Privacy Policy. Contact hello@bizora.co.uk with questions.
6. Changes
We may update this policy when the service, providers or legal requirements change. We will publish the current version here and update the date above.