Cookies · Fol. I · The full list

Cookie
policy.

§ last updated 16 April 2026

Nothing non-essential loads until you accept. Declining is a real choice, not a dark pattern where the Reject button is buried three clicks deep. This page lists every cookie and similar technology used on orchestrix.co.uk, who sets it, and what it’s for.

Fol. II·About Cookies Here
Basics · Fol. II

What a cookie is.

A cookie is a small text file that a website asks your browser to remember between pages. Some are strictly necessary for the site to work, like the one that remembers the choice you just made on the cookie banner. Others are optional, and need your explicit permission under UK PECR regulation 6.

A few of the items listed below aren’t technically cookies but they do the same job: localStorage entries, third-party scripts, and aggregate measurement signals. They’re disclosed here for the same reason, which is that a cookie policy should list everything that touches your browser, not just the ones with the word ‘cookie’ on them.

The bureau’s positionFig. 2.01

Nothing non-essential loads until you accept. Analytics is optional. Declining is a real choice, the buttons are equally prominent, and you can change your mind at any time from the ‘cookie preferences’ link in the footer. That’s the whole deal.

Fol. III·What's Set, And By Whom
The list · Fol. III

Every cookie,
named and sourced.

Name, setter, purpose, category, duration, and jurisdiction. If a cookie is set on this site and it isn’t in this table, that’s a bug. Email [PRIVACY_EMAIL] and the bureau will fix it.

Name
orchestrix.consent.v1
Set by
Orchestrix (first-party localStorage)
Purpose
Stores your cookie choice so the banner doesn't reappear every visit.
Type
Strictly necessary
Duration
Persistent until you clear site data
Region
UK (your browser)
Name
_ga
Set by
Google (GA4)
Purpose
Distinguishes unique visitors for pageview analytics.
Type
Analytics
Duration
2 years
Region
US (DPF)
Name
_ga_W37S6495C2
Set by
Google (GA4)
Purpose
Holds per-property session state for this site.
Type
Analytics
Duration
2 years
Region
US (DPF)
Name
_clck
Set by
Microsoft Clarity
Purpose
Persistent user identifier for session stitching across visits.
Type
Analytics
Duration
1 year
Region
US (DPF)
Name
_clsk
Set by
Microsoft Clarity
Purpose
Session identifier for the current browser session.
Type
Analytics
Duration
1 day
Region
US (DPF)
Name
MUID
Set by
Microsoft
Purpose
Cross-property user identifier used by Microsoft services.
Type
Analytics
Duration
About 13 months
Region
US (DPF)
Name
ANONCHK
Set by
Microsoft
Purpose
Validates Clarity telemetry requests.
Type
Analytics
Duration
10 minutes
Region
US (DPF)
Name
SM
Set by
Microsoft
Purpose
Syncs the MUID identifier across Microsoft domains.
Type
Analytics
Duration
Session
Region
US (DPF)
Name
NID, SOCS, __Secure-* (Google Calendar)
Set by
Google
Purpose
Used by the embedded Google Calendar booking widget. Only set if you click 'load booking calendar' on the contact page.
Type
Third-party, click-to-load
Duration
Varies, up to 6 months
Region
US (DPF)

DPF refers to the UK Extension to the EU-US Data Privacy Framework, which is the adequacy mechanism the UK government relies on to allow personal data transfers to US-based processors that are self-certified under the framework.

Fol. IV·Session Recording
Clarity · Fol. IV

What Clarity
actually does.

Microsoft Clarity is a session replay tool. If you accept analytics cookies, it records the structure of your visit: which pages you saw, where you moved the mouse, what you clicked, how far you scrolled, which elements you interacted with. It doesn’t record audio, it doesn’t turn on your camera, and it doesn’t capture what you type inside form fields.

Clarity’s masking is configured so input fields, images, and sensitive text are redacted from the recording by default. The bureau uses Clarity to spot usability problems on the site, for example a button that nobody ever clicks because it looks inert, or a section of a service page that everyone bounces off. That’s the whole reason it’s there.

The ICO treats session replay as higher-risk than basic analytics, which is why it gets its own section here. Data is sent to Microsoft in the United States under the UK Extension to the EU-US Data Privacy Framework. Clarity never runs if you decline analytics. You can withdraw consent and stop it from running again at any time.

Fol. V·Changing Your Mind
Controls · Fol. V

Three ways to
change your mind.

01Route

The footer link.

Every page on this site has a 'cookie preferences' link in the footer. Clicking it reopens the consent banner with your current choice, and you can change it. This is the simplest route and the one the bureau recommends.

02Route

Clear site data.

If you clear the orchestrix.co.uk site data in your browser, the consent record goes with it, and the banner reappears on your next visit as if you were a new visitor.

03Route

Browser settings.

Every major browser lets you block or delete cookies for a specific site, or for all sites. That works here too. Instructions live in your browser’s own help pages.

Fol. VI·If You Decline
Decline · Fol. VI

Declining
works properly.

When you click Decline, the following is what actually happens on the server and in your browser. No hidden fallbacks, no tricks.

  • 01

    Google Analytics 4 is not loaded.

    No _ga or _ga_W37S6495C2 cookie is set. Google’s consent mode defaults stay in the ‘denied’ state that’s already the starting point on every fresh visit.

  • 02

    Microsoft Clarity is never initialised.

    The Clarity script never runs. There’s no session recording, no heatmap, no MUID, no _clck, no _clsk.

  • 03

    Server logs still run.

    Standard HTTP access logs continue to record IP, path, and user agent. They’re used for security and debugging, and they’re retained for about 30 days.

  • 04

    The booking iframe stays click-to-load.

    The Google Calendar booking widget is never mounted unless you explicitly click ‘load booking calendar’. Clicking it is the consent signal for Google’s own widget cookies.

Fol. VII·Closing

Read the full
privacy notice?

The cookie policy covers what this site stores on your device. The full privacy notice covers everything else: who the bureau is, what data it holds off-device, your rights, and how to complain to the ICO if any of it goes wrong.

Nottingham·MMXXVI·Last updated 16 April 2026