Cookie Policy

A cookie is a small text file a website asks your browser to store and send back on later requests. Websites also use other client-side storage that is technically not a cookie but serves a similar purpose:

• localStorage — values kept in your browser for this website until they are removed. Not sent automatically with requests.
• sessionStorage — the same idea, but cleared when you close the browser tab.

We describe all three below because they can all affect your privacy, even though only the first is genuinely a cookie.

Strictly necessary

Necessary storage operates without asking for optional consent, because the service you have asked for cannot work without it: authentication, session continuity, security, keeping your triage answers during the wizard, completing a payment you initiated, and remembering your cookie choice. We still identify and explain it, which is what this page does.

Optional categories

Optional categories are off by default. Nothing optional is loaded or written before you turn it on.

• Preferences / functionality — currently only the sidebar_state cookie in the signed-in workspace.
• Analytics — none in use today.
• Marketing — the Google tag for our Google Ads account (AW-16875498826), used only to measure whether our own adverts lead to enquiries. It is loaded with Google Consent Mode v2 in a fully denied state, so no advertising or analytics storage is written and no advertising identifiers are used until you turn Marketing on below.

Google Consent Mode v2

Your choices are passed to Google as a consent signal: ad_storage, ad_user_data and ad_personalization are controlled by the Marketing category, and analytics_storage by the Analytics category. All four start as denied, and they are set back to denied the moment you reject non-essential storage or withdraw consent. Google Ads measurement never affects sign-in, payments, the Emergency Check, case workflows or evidence uploads.

When you start a subscription or buy an Emergency Pass, you are redirected to a Stripe-hosted checkout or billing page. Stripe sets its own cookies on its own domain to process the payment and prevent fraud, under its own cookie and privacy notices. We do not embed Stripe scripts or Stripe cookies into our own pages, and rejecting our optional categories does not prevent checkout from working.

• no advertising cookies or advertising identifiers unless you accept the Marketing category — the Google tag is present but denied by default, and we do not use it to build advertising audiences or to personalise adverts;
• no tracking pixels or web beacons from any other provider;
• no analytics or product-measurement scripts;
• no social media embeds, fonts or videos loaded from third-party domains;
• no fingerprinting technology;
• no incident details, evidence, case content or account data are ever sent to Google.

The application does contain a neutral analytics helper that would send billing funnel events to a measurement tool if one were installed. No such tool is installed or loaded, so no events leave your browser.

Change your choices here at any time. The same controls are available from the Cookie settings link in the footer of every public page.

You can also block or delete cookies and clear site storage in your browser settings, and use private browsing. Blocking strictly necessary storage will prevent you from signing in and using the incident workspace.

We will update this page whenever the storage technologies we use change, and we will bump the consent version if a change means your previous choice can no longer be relied on.

Cyber Crisis Desk is operated by Miro Global Services LTD, registered in England and Wales under company number 14466196. Registered office: 7 The Colliery, Donnington Wood, Telford, England, TF2 7FQ.

Questions: privacy@cybercrisisdesk.com