Cookie Policy
Last updated 22 September 2026
This policy explains how SPEND PILOT LTD uses cookies and similar technologies on the SpendPilot website at spendpilot.co.uk and inside the SpendPilot mobile app. It is part of our Privacy Policy.
1. What these technologies are
A cookie is a small file a website stores on your device to remember something about you or your visit. The app does not use cookies in the browser sense, but it uses software development kits (SDKs) and device identifiers that do a similar job. In this policy "cookies" covers all of these.
2. The kinds we use
| Type | What it does | Consent needed? |
|---|---|---|
| Strictly necessary | Keeps you signed in, remembers your cookie choices, protects against abuse. The Service cannot work without these | No |
| Analytics | Helps us understand which pages and features are used, and where things go wrong, using Google Analytics | Yes |
| Session analytics | Records how visitors interact with pages, for example scrolling and tapping, to show us where the site is confusing, using Microsoft Clarity | Yes |
| Advertising | None. We do not use advertising cookies or sell advertising | Not applicable |
UK law now allows some cookies used only for statistical purposes to be set without consent, provided you are told about them and can object. Because Google Analytics and Microsoft Clarity are run by third parties, and because Clarity records how you interact with pages, we have chosen to ask for your consent before setting any of them.
3. Cookies on the website
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sp_consent | SpendPilot | Stores your cookie choices | Strictly necessary | 12 months |
| _ga | Google Analytics | Distinguishes visitors | Analytics | 2 years |
| ga[ID] | Google Analytics | Keeps session state | Analytics | 2 years |
| _clck | Microsoft Clarity | Keeps a visitor identifier | Session analytics | 12 months |
| _clsk | Microsoft Clarity | Links page views within one session | Session analytics | 1 day |
| CLID | Microsoft Clarity | Identifies the first time Clarity saw this visitor | Session analytics | 12 months |
| ANONCHK | Microsoft Clarity | Indicates whether an anonymised identifier is used | Session analytics | 10 minutes |
| MR | Microsoft Clarity | Indicates whether to refresh MUID | Session analytics | 7 days |
| MUID | Microsoft | Identifies browsers across Microsoft services | Session analytics | 13 months |
| SM | Microsoft Clarity | Synchronises identifiers across Microsoft domains | Session analytics | Session |
[CONFIRM THIS TABLE AGAINST A SCAN OF THE LIVE SITE BEFORE PUBLISHING. NAMES AND DURATIONS ARE SET BY THE PROVIDERS AND CHANGE.]
We have configured Google Analytics to shorten IP addresses and not to share data with Google for advertising. Clarity is configured to mask text you type into forms. [CONFIRM CONFIGURATION]
4. Inside the app
| SDK | Provider | Purpose | Type | Your control |
|---|---|---|---|---|
| Google Analytics for Firebase | Which screens and features are used, crash and performance data | Analytics | Off until you turn analytics on. Change any time in Settings > Privacy | |
| Microsoft Clarity | Microsoft | How screens are used, with typed text masked | Session analytics | Same toggle as analytics |
| Push notification services | Apple (APNs), Google (FCM) | Deliver the alerts and reminders you turn on | Strictly necessary for notifications | Device notification settings |
[CONFIRM THE FULL SDK LIST IN THE SHIPPED BUILDS. ANY CRASH REPORTING, ATTRIBUTION OR SUPPORT SDK MUST BE ADDED HERE.]
5. Giving and withdrawing consent
Website. When you first visit we show a banner. "Accept all" turns analytics and session analytics on. "Reject all" leaves only strictly necessary cookies. "Manage" lets you choose. Both buttons are equally prominent, and rejecting is as easy as accepting. You can change your mind at any time using the Cookie settings link in the footer.
App. During onboarding we ask whether you want to help us improve SpendPilot by sharing usage data. The default is off. You can change your choice at any time in Settings > Privacy > Analytics.
Browser controls. You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the website working.
6. Data sent outside the UK and EU
Google and Microsoft process analytics data in the United States. Both are certified under the EU-US Data Privacy Framework and its UK Extension. See the Privacy Policy section on international transfers.
7. Changes
We will update this policy when the cookies we use change, and the date at the top will change with it.
8. Contact
Still have questions?
[email protected]