Cookie Policy

This policy covers www.sendx.io, our marketing website. It explains every cookie and similar technology we set, what each one is for, and how to turn them off. Our product at app.sendx.io is covered separately by the Privacy Policy.

Cookies are small files a site stores in your browser. Similar technologies — localStorage and pixels — do much the same job, and everything below applies to those too.

Nothing on this website needs a cookie in order to work. You can read every page, follow every link and reach every form with all of them switched off. The cookies below exist so we can measure how the site is used and which of our marketing actually brings people here.

If you are in the UK, the European Economic Area or Switzerland, we show a banner on your first visit and set nothing optional until you choose. Refusing is one click and carries no penalty: the site behaves identically either way.

Elsewhere, analytics and marketing cookies are on by default, which is permitted under the law that applies in those places. You can still turn them off at any time using the Cookie preferences link in our footer, and we treat that exactly the same way.

We detect your region in the browser, from your device timezone, and we deliberately err towards asking. If you are shown a banner you did not expect, that is why.

One cookie, and it only exists because you answered the banner.

• cc_cookie — stores the choice you made, so we do not ask again on every page. Set by this website, lasts 6 months. Cannot be switched off, because switching it off is what it records.

These tell us which pages get read, how people move through the site, and where they give up. We use them to decide what to write and what to fix. They are not used to target advertising.

One caveat, stated plainly: Google Analytics and Microsoft Clarity are delivered through Google Tag Manager, and that single container also carries our advertising tags. We cannot load one without the other, so for now refusing Marketing also switches these two off. PostHog and DataFast are loaded directly and follow the Analytics setting on their own.

PostHog — product and web analytics. Session recording, autocapture and heatmaps are switched off on this site.

• ph_*_posthog — a random id so repeat visits from the same browser are counted as one person rather than several. 12 months.

Google Analytics 4 — loaded through Google Tag Manager.

• _ga — distinguishes one browser from another. 2 years.

• _ga_* — keeps session state. There is one of these per Analytics property, and this site reports into two. 2 years.

DataFast — a lightweight traffic counter.

• datafast_visitor_id — a random visitor id. 12 months.

• datafast_visitor_first_seen_at — the date of your first visit. 12 months.

• datafast_visitor_session_count — how many visits you have made. 12 months.

• datafast_session_id — groups page views into one visit. 30 minutes.

Microsoft Clarity — shows us aggregated heatmaps and where people get stuck.

• _clck and _clsk — connect your page views into one session. Up to 12 months.

• CLID, MUID, ANONCHK, SM, MR — set by Microsoft on clarity.ms to recognise a returning browser. Up to 12 months. See Microsoft’s privacy statement.

These let us see which campaigns bring people here, and let our newsletter signup form load. If you refuse them, the newsletter form on our blog posts will not appear — you can still subscribe by writing to us.

Everything in this section except our own two items is delivered through Google Tag Manager, which we do not load at all unless you allow this category.

SendX — our own product, used here to run the newsletter signup form on blog posts.

• sxcid and sxtid — identify your browser and our account to the form, so an existing subscriber is not shown a signup form again.

• sendxFrequency, sendxNumTimesShown, sendxSubscribed — remember whether you have already seen or completed the form, so it is not shown repeatedly.

sendx_attribution — our own first-party cookie. On your first visit it records where you came from: any campaign tags in the link you followed, the referring site, and the page you landed on. If you later create an account, this tells us which campaign earned it. 12 months.

LinkedIn Insight Tag — measures whether our LinkedIn campaigns lead to signups, and lets us show ads to people who have visited.

• bcookie, lidc, li_sugr, li_gc, UserMatchHistory, AnalyticsSyncHistory — set by LinkedIn. Durations are set by LinkedIn and range from one day to two years. See LinkedIn’s cookie policy.

Reddit Pixel — the same measurement for our Reddit campaigns.

• _rdt_uuid and _rdt_em — a random id used to connect an ad click to a later signup. 90 days. See Reddit’s cookie notice.

Google Ads — measures whether our Google campaigns lead to signups.

• _gcl_au — links an ad click to a conversion on our site. 90 days.

• IDE — set by Google on doubleclick.net for ad measurement and remarketing. Up to 13 months. See how Google uses cookies.

Microsoft Advertising — the same measurement for our Bing campaigns.

• MUID, MR, SRM_B — set by Microsoft on bing.com to recognise a browser across sites. Up to 13 months.

HubSpot — our CRM. It records which pages you read before getting in touch, so a sales conversation starts with some context.

• hubspotutk — identifies your browser to HubSpot. 6 months.

• __hstc, __hssc, __hssrc — first and current visit timestamps and session state. 30 minutes to 6 months.

Use the Cookie preferences link at the bottom of any page. You can change individual categories or turn everything off, as often as you like.

When you withdraw consent we delete the cookies in that category and reload the page, so scripts that were already running stop. Cookies set by LinkedIn and Reddit on their own domains are outside our reach — use the links in section 5 to control those directly.

Independently of this site, every major browser lets you block or delete cookies, and most offer a setting to block third-party cookies entirely. These controls apply across every site you visit and will override anything you choose here.

• Chrome, Edge, Firefox and Safari all expose this under Settings, usually as Privacy or Cookies and site data.

• Browser-level tracking protection, private browsing, and content blockers will also stop most of the cookies above. We do not try to work around them.

• If your browser sends a Global Privacy Control signal, we treat it as a refusal of both analytics and marketing, everywhere in the world, without you having to touch the banner. Making a choice here afterwards overrides it.

If you have a question about this policy, or you want to know what we hold about you, write to hello@sendx.io.

SendX is operated by SendPost, LLC.