Legal

Cookie policy

Last updated: 28 April 2026

This policy explains every cookie and similar technology CleanTender sets, why we set it, and how you can control it. It complements our privacy policy, which covers personal data more broadly.

What is a cookie?

A cookie is a small text file that a website asks your browser to store on your device. Cookies let a site recognise you across page loads — for example, to keep you signed in. We also use a related technology called localStorage to remember your cookie choice; from a privacy perspective the rules are the same.

Cookies we set

We set strictly-necessary cookies on every visit, plus optional analytics cookies (Microsoft Clarity) only if you've granted consent. Strictly-necessary cookies are exempt from the consent requirement under PECR Reg 6(4), but UK law still requires us to inform you about them — that's the tables below.

Strictly necessary

NamePurposeSet byLifetime
insforge_access_tokenIdentifies your authenticated session so server actions can load your data. HTTP-only, secure in production, Same-Site Lax.cleantender.co.uk15 minutes (sliding)
insforge_refresh_tokenLets us refresh your session without forcing you to sign in again every 15 minutes. HTTP-only, secure in production, Same-Site Lax.cleantender.co.uk7 days
cleantender:cookie-consent (localStorage)Remembers the choice you made in the cookie banner so it doesn't keep popping up.cleantender.co.uk12 months from last update

Analytics

We use Microsoft Clarity to understand how visitors interact with the site (heatmaps, scroll depth, anonymous session recordings of mouse and click activity). Clarity helps us spot UX bugs and pages that confuse people — it is not used for advertising. Sensitive form fields (passwords, payment details) are masked by default.

Clarity only loads if you've ticked Analytics in the cookie banner. If you decline, none of these cookies are set and no recordings are made. Microsoft processes the data on CleanTender's behalf as a data processor; full details are in Microsoft's privacy statement and the Clarity cookie list.

NamePurposeSet byLifetime
_clckPersists a Clarity user ID and the consent given for the site, so the same visitor across sessions can be linked anonymously.clarity.ms (Microsoft)1 year
_clskConnects multiple page views from the same visit into a single recording session.clarity.ms (Microsoft)1 day
CLIDIdentifies the first time Clarity saw this user on this browser.clarity.ms (Microsoft)1 year
MUIDMicrosoft-wide user identifier used by Clarity and other Microsoft services to recognise unique browsers.clarity.ms (Microsoft)1 year
ANONCHKIndicates whether MUID is transferred to ANID, a Microsoft advertising cookie. Off for Clarity-only deployments.clarity.ms (Microsoft)10 minutes
SMUsed for syncing the MUID across Microsoft domains.clarity.ms (Microsoft)session

Marketing

We do not run advertising or marketing cookies. We do not embed social-media trackers or third-party retargeting pixels.

Third-party services

The site uses these third-party services. Unless flagged, they operate without setting browser cookies on visitors:

  • Insforge — backend / database. The session cookies above are issued by our backend, not by a third-party tracker.
  • Microsoft Clarity — anonymous analytics and session replay, loaded only with your consent. See the Analytics table above for the cookies it sets.
  • Stripe — payment processing. When you start checkout we redirect you to Stripe's hosted page; Stripe sets its own cookies on its domain there for fraud prevention. We don't embed Stripe.js on CleanTender pages, so no Stripe cookies are set on cleantender.co.uk itself.
  • Anthropic — AI evaluation and bid drafting, invoked server-side. No browser-side scripts or cookies.
  • Resend — email delivery for tender alerts and account verification. Server-side only.
  • Netlify — hosting / CDN. May set short-lived performance cookies for load balancing on rare cache misses; none are used to identify or track visitors.

Managing your preferences

You can change your cookie preferences at any time:

  • Click to re-open the banner.
  • Use your browser's settings to delete or block cookies. Note that blocking the strictly-necessary cookies above will sign you out and prevent you from using authenticated parts of the site.
  • Most browsers let you set "Do Not Track" — we respect that signal where it's specified, even though we don't run analytics today.

Changes to this policy

When the cookies we set change, we'll update this page and the "Last updated" date at the top. Material changes (for example, adding an analytics or marketing category) will trigger a fresh consent prompt before any new cookies are set.

Contact

Cyber Phoenix Ltd (CleanTender)
124-128 City Road, London EC1V 2NX, United Kingdom
Email: support@cleantender.co.uk