Legal —
2026-06-01
This Cookie Policy explains how SecureLayer7 ("we", "us") uses cookies and similar storage on securelayer7.net and its subdomains. Cookies are small text files stored on your device when you visit a website. We use them for essential site functions and, only with your consent, for analytics and marketing. You can change your choice at any time using the link at the bottom of this page.
Essential — Required for the site to work. Always active. Cannot be turned off. Analytics — Helps us understand how visitors use the site. Loaded only when you click Accept all or opt in through Customize. In the European Economic Area, the United Kingdom, Switzerland, India, and Brazil, analytics is fully off until you opt in. Marketing — Used for advertising and remarketing. Loaded only when you click Accept all or opt in. Off by default in every region until you consent.
These are needed for the site to function and are exempt from consent under GDPR, UK PECR, India DPDP, and similar laws. _uxp Vendor: SecureLayer7 (first-party). Expiry: 12 months. Purpose: Stores your cookie-preference choice so we don't ask you on every page. Without it, the banner would re-appear on every visit. _sx Vendor: SecureLayer7 (first-party). Expiry: 12 months. Purpose: Anonymous session identifier used for chat continuity, lead-form draft persistence, and lead attribution. Not shared with advertisers or analytics platforms. Next.js / OpenNext session cookies (e.g. __Host-prefixed authentication cookies) Vendor: SecureLayer7 (first-party). Expiry: session or short-lived. Purpose: Authentication and session integrity for logged-in users (operators, marketers). Cloudflare anti-bot cookies (e.g. __cf_bm) Vendor: Cloudflare (third-party, set by our CDN). Expiry: 30 minutes. Purpose: Distinguish humans from automated bots to protect the site from abuse.
Loaded only after you click Accept all or turn on Analytics in Customize. _ga, _ga_<measurement-id> Vendor: Google Analytics 4. Expiry: up to 24 months. Purpose: Counts unique visitors and page views. _clck, _clsk Vendor: Microsoft Clarity. Expiry: up to 12 months / 24 hours respectively. Purpose: Heatmaps and session-replay style usability analytics. Replays are masked by default. GTM container cookies Vendor: Google Tag Manager. Expiry: varies. Purpose: Loads the tags above and any additional tags configured by our marketing team.
Loaded only after you click Accept all or turn on Marketing in Customize. Off by default everywhere. _gcl_au Vendor: Google Ads. Expiry: 3 months. Purpose: Conversion attribution for ads we run on Google. _uetsid, _uetvid Vendor: Microsoft Advertising (Bing UET). Expiry: 24 hours / 13 months. Purpose: Conversion tracking for ads we run on Bing / Microsoft. hubspotutk Vendor: HubSpot. Expiry: 13 months. Purpose: Identifies repeat visitors so our CRM can associate marketing touches with leads.
You can change your cookie choices at any time: • Click "Edit preferences" on the cookie banner. • Use the link at the bottom of this page ("Edit preferences") to reopen the banner. • Clear the cookie named _uxp in your browser settings — the banner will re-appear on your next visit. • Enable Global Privacy Control (GPC) in your browser. If your browser sends a GPC signal, we automatically treat it as a rejection of analytics and marketing — no banner shown. You can also delete or disable cookies through your browser settings. Note that disabling essential cookies may break parts of the site (sign-in, chat, lead-form draft persistence). Browser instructions: Chrome, Firefox, Safari (iOS), Safari (macOS), Edge, Opera, Brave.
European Economic Area, United Kingdom, Switzerland — We comply with the EU GDPR, UK GDPR + PECR, and the revised Swiss FADP. No analytics or marketing cookies are loaded before you opt in. India — We comply with the Digital Personal Data Protection Act 2023. As of the 2026 Supreme Court ruling on consent, we treat India as opt-in-by-default for non-essential cookies, ahead of the May-2027 effective date. Brazil — We comply with the LGPD. No analytics or marketing cookies are loaded before you opt in. See the Portuguese version at /cookie-policy-pt. United States and other regions — Analytics is treated as a legitimate-interest category and may load before you interact with the banner. You can opt out at any time using the banner or the link at the bottom of this page. Where state law (California CPRA, Colorado, Connecticut, Texas, Virginia) requires it, we honor the Global Privacy Control browser signal as an opt-out.
We may update this Cookie Policy from time to time. The "effective date" at the top of the page reflects the most recent change. Material changes will be summarized in the section above; minor wording or vendor-list updates may be made without separate notice.
Questions or requests about cookies and personal data can be sent to info@securelayer7.net. We respond within the timelines required by applicable law (GDPR / UK GDPR: one month; DPDP: as prescribed by the Rules; LGPD: 15 days).