Optional means optional
The public Site works without analytics. Google Analytics and Microsoft Clarity stay off until you accept them. Declining is available at the same time, and you can change the choice here later.
- ALCO targeted-ad campaigns
- None
- Analytics default
- Off
- Reject button
- Available immediately
- Global Privacy Control
- Honored
Cookies, local storage and similar technologies
A cookie is a small value a website or service asks a browser to store and send with later requests. Local storage is a separate browser feature that keeps a preference on a device but does not automatically send it with every web request. Tags and pixels are code that can make requests to analytics or security providers.
This Policy uses “cookies” as a convenient umbrella term while identifying the actual storage type in the inventory below. Incognito or private-browsing modes, browser restrictions and manual clearing can shorten any stated duration.
Current technology inventory
This table describes the technologies the public Site may use as of the last-updated date. Provider behavior can change; we review this inventory and update it when our implementation changes.
| Technology | Provider / storage | Purpose | When used | Typical duration |
|---|---|---|---|---|
alco.analytics-consent.v1 | ALCO · browser local storage | Records granted or denied, policy version, decision time, expiry and source so the Site can honor the choice. | After a choice or a supported Global Privacy Control signal | Up to 180 days, unless changed, cleared or replaced sooner |
_ga_ga_<container-id> | Google Analytics · first-party cookies | Distinguishes browsers and sessions and measures aggregate Site use. | Only after “Accept analytics” | Typically up to 2 years, subject to browser limits and Google/ALCO configuration |
_clck_clsk | Microsoft Clarity · first-party cookies | Persists a pseudonymous Clarity ID and connects page views into a session. | Only after “Accept analytics”; Clarity is not loaded on public form pages | _clck: typically up to 1 year; _clsk: typically 1 day |
CLID, ANONCHK, MR, MUID, SM | Microsoft Clarity · third-party cookies | Supports Clarity identification, session operation and synchronization across Microsoft domains. Microsoft’s terms and privacy statement govern its independent use. | Only after “Accept analytics,” where the browser and Clarity configuration allow | From a browser session or minutes to about 1 year, depending on the cookie and provider configuration |
_GRECAPTCHA | Google reCAPTCHA · necessary security cookie | Performs automated-abuse and risk analysis for protected forms. | When a reCAPTCHA-protected contact or general-interest careers form is displayed or submitted | Provider controlled; Google describes it as a necessary cookie |
| Security/challenge cookies, if triggered | Cloudflare · necessary edge security | Routes traffic, identifies malicious or automated requests and remembers successful security challenges. Cookies such as __cf_bm or cf_clearance may be used when the applicable protection is active. | Only when the edge security service needs them | Session or provider-controlled duration, depending on the protection triggered |
The placeholder <container-id> represents the Site’s analytics property suffix. Third-party cookies may be blocked, partitioned or shortened by your browser.
Essential preferences, delivery and security
The Site uses a local preference to remember whether analytics were granted or denied. Without it, the choice would have to be requested on every page. This preference contains no name, email address or advertising identifier.
Normal requests also pass through hosting, content-delivery and security infrastructure. Those systems process IP address, request, device and security information and may use short-lived security cookies when a challenge or anti-bot feature requires one. These functions are used to deliver the Site and protect it from abuse, not to measure marketing performance.
Optional analytics
Google Analytics 4
Google Analytics helps ALCO understand visits, pages, approximate region, device/browser characteristics and navigation in aggregate. We configure advertising storage, ad-user-data storage and ad-personalization storage as denied. We do not send form content to Google Analytics.
Microsoft Clarity
Clarity produces interaction analytics, heatmaps and session replays from page structure and actions such as clicks, scrolling and navigation. ALCO uses it to find usability problems. ALCO does not load Clarity on contact or general-interest careers form pages. Visitors should still avoid placing sensitive information in a public form unless specifically asked.
Microsoft and ALCO act independently for their respective processing under Clarity’s terms. Microsoft states that Clarity data may be used to provide and improve Microsoft products and services and for purposes described in the Microsoft Privacy Statement, which can include advertising-related uses. ALCO does not use Clarity to run targeted ads. Clarity remains blocked unless you consent, and advertising storage is signaled as denied.
Microsoft generally retains Clarity playback data for 30 days. Click and heatmap data, labeled or selected sessions and related aggregate information may be retained for up to nine months under its published schedule.
Google reCAPTCHA on forms
Contact and general-interest careers forms may use Google reCAPTCHA v2 to distinguish a legitimate submission from automated spam. When configured, the widget and verification service receive an IP address, browser and device information, interaction or risk signals and a verification token. Google states that reCAPTCHA sets the necessary _GRECAPTCHA cookie when executed for risk analysis.
This security control can operate even when optional analytics are declined. Its processing is governed by Google’s applicable Privacy Policy and Terms.
How to reject or withdraw analytics consent
Use the controls at the top of this page or the Privacy choices link in the footer. Acceptance and rejection are both immediate. If you withdraw after analytics has loaded, the Site sends denied consent signals, clears first-party analytics cookies it can reach and reloads without requesting the analytics tags again.
Clearing all cookies or site data in your browser also removes the saved choice. The banner will return so you can choose again. A decision applies only to the browser and device where it was made and expires after 180 days so the Site can request a fresh choice.
Browser controls and privacy signals
Most browsers let you view, block or delete cookies and local storage. Blocking essential storage does not prevent you from reading public content, but the Site may be unable to remember a preference or complete a protected form.
If the browser sends a supported Global Privacy Control (GPC) signal, the Site treats it as a request to decline optional analytics. A GPC denial takes precedence over a previously stored analytics grant while the signal remains enabled.
“Do Not Track” is not a uniform or widely implemented standard. ALCO does not use it as a separate signal, but analytics still remains off unless consent is granted, and GPC is honored as described above.
Changes and contact
We may update this Policy when the Site, our vendors or applicable requirements change. The last-updated date identifies the current inventory. If a change requires a fresh consent decision, the Site will ask again rather than silently carrying an older choice forward.
Ask ALCO
For a question about a particular cookie, browser request or analytics choice, contact us and include the browser and page involved.