Cookies and similar technologies are small tools used online to remember things about you and your device when you visit our site. For instance, they remember your language preferences, keep you logged in, or analyse your browsing activity to show you ads you may be interested in.
Cookies can be native – meaning that they are owned by the operators of the website you are visiting – or owned by a third-party who can place cookies from their own separate domain.
Third-party cookies may be subject to distinct privacy and cookie policies, which the owners are responsible for making accessible to you.
When you first visit our sites, we inform you that cookies may be used, either because they are required for our site to function or because you have consented to them.
While you may have accepted or rejected cookies at that point, you can withdraw your consent at any time using our cookie preferences management tool, which is available as a permanent link on the site you visited.
You can also delete the cookies stored on your computer using your internet browser settings.
Disabling cookies does not prevent you from browsing our site, although the use of some functionalities may be limited.
We use this term to describe strictly necessary cookies. These are cookies used for the correct operation of the site. They may be used to:
These are used to help customise our site and for website traffic and analytics purposes. They can also be used to allow us to operate certain services.
Performance cookies include cookies used to:
These are used for our advertising purposes and may track users across different channels or devices. These cookies include conversion tracking cookies and may also be used to
We use the following cookies on our site listed in Table 1.
If you are in the US, you may be able to exercise your rights to opt out of a sale or sharing of your personal data where this is relevant. To find out more, please visit our privacy notice. If you want to opt out of cookies, please visit our cookie preferences page on the site you visited.
This cookie notice may be modified when required by the legislation in force at any time or when there is any variation in the type of cookies used. We recommend that you review this notice regularly to keep up with updates.
| Vendor | Cookies | Purpose | Typical duration |
|---|---|---|---|
| Akamai | bm_sv bm_mi ak_bmsc | To differentiate between human and automated/bot traffic and load balance | session to 4 hours |
| Amazon | AWSALB AWSALBCORS AWSALBTG AWS ALBTGCORS | Used to enable load balancing | up to 7 days |
| bp | geo‑redirect, _Geo_Banner_Dismiss, _Geo_Confirmed_Locale, _N_Banners_ACK, _Geo_Hide | Used for remembering the most relevant site and cookie banner to show to the user and avoiding repeated prompts for this decision. Also used to remember the customer’s preferred local site. | Session to 1 year |
| Cloudflare | __cf_bm, _cfuvid, __cfduid, cf_clearance, cf_chl_rc_i and cf_chl_rc_ni, cflb | Security, bot detection cookies , CAPTCHA and load balancing cookies | Seconds to 30 days |
| DotDigital | comapi.hub.currentState comapi.hub.lastClicked comapi.hub.session comapi.hub.deviceId comapi.hub.welcomeMessage.sentOn comapi.hub.profileId comapi.hub.orphanedEventscomapi.hub.config comapi.hub.comapiMessengerState comapi.hub.comapiConfig _tt_session,_ttCookiePermissions LP-X, Survey-Started-X, respondentidX | To enable DotDigital’s chat service, user login experience, cookie consents, customer survey and lead generation forms to function correctly | Varies by browser |
| _GreCAPTCHA | To differentiate between human and automated/bot traffic | Up to 13 months | |
| Microsoft | XSRF_token ASPSESSIONIDAURSABBS ARRAffinity ARRAffinitySameSite | Site session functionality and Prevent Cross-Site Request Forgery (XSRF/CSRF) attacks in ASP.NET. Azure products | |
| OneTrust | OptanonConsent OptanonAlertBoxClosed Usprivacy euconsent-v2 eupubconsent-v2 OTAdditionalConsentString OneTrustWPCCPAGoogleOptOut OTGPPConsent | Cookie consent banner and preference storage, including USA GPC consents | Up to 399 days |
| PHP | PHPSESSID | To provide functionality across pages and sessions | Session |
| Salesforce | sfmc_consent visitor_id<accountid> pi_opt_in<accountid> visitor_id<accountid>-hash lpv<accountid> pardot, pi_opt_in | SFMC tracks if a user has opted in/out for consent purposes for Salesforce Marketing Cloud Account Engagement cookies are set for security, to track opt ins and manage visitors reloading the same page | Up to 730 days |
| Syrenis Cassie | SyrenisCookieConsentDate_<id> SyrenisCookieFormConsent_<id> SyrenisCookiePrivacyLink_<id> SyrenisGtmConsent_<id> SyrenisGuid_<id> | To capture Cookie consent from the Cookie banner store preferences compliantly under regulatory frameworks | Up to 1 year |
| Wordpress | __wp_sess | To provide functionality across pages and sessions | 48 hours to 14 days |
| Vendor | Cookies | Purpose | Duration |
|---|---|---|---|
| Aral site | production-lara_session mein_aral_session | To provide functionality across pages and sessions - used by bp/Aral Germany | 5 minutes |
| Vendor | Cookies | Purpose | Typical duration |
|---|---|---|---|
| Hotjar | _hjSessionUser_*, ajs_anonymous_id_ga_fbp_gcl_au | User experience analytics and behaviour tracking | 1 year |
| Qualtrics | QST, Qtip, respondentid*, Survey-Started-X, X-Completed, respondent-X, respondentidXcount, LP-X | Survey delivery and response integrity | Session |
| Siteimprove Analytics | nmstat | To recognise a browser and collect statistics about website usage, such as visits, navigation paths, and when the visitor last visited the site. The information is used to improve website usability and content effectiveness | Up to 400 days |
| Vendor | Cookies | Purpose | Typical Duration |
|---|---|---|---|
| Adobe | USERREGION, aam_uuid, AMCV, s_vi, s_fid demdex, dextp, dpm, mbox, mboxEdgeCluster, atCheck, _mkto_trk, nmsat, FPGSID | Site analytics, customisation, marketing and targeting including Target, Marketo and Audience products | Up to 2 years |
| Amazon | ad-id | Ad delivery, targeting and interest based advertising | Up to 7 months |
| AppNexus / Xandr (Microsoft companies) | anj, uuid2, XANDR_PANID, icu, uids, usersync | Programmatic advertising and ID synchronisation | 90 days to 1 year |
| Bowen Craggs | bp_comNo, bp_comYes, bp_investorNo, bp_investorYes, bp_highfreqNo, bp_highfreqYes, bp_whatNo, bp_whatYes, JSSCounter | Used to deliver visitor surveys on the bp.com domain including counts of the number of pages to control when the invitation for the survey appears. | Session to 90 days |
| Crimtan | CTNSNET, cid | Programmatic advertising campaign measurement | 1 year |
| Dotdigital | dm_i, recordID, sessionID, dm_i, dm-subscriber, Survey-X, lpformX, X-Dismissed, X-Completed, respondentidXcount, responder-X, Referrer, _ttAnalytics | Tracks and identifies a visitor as a Dotdigital contact whilst they browse a site’s pages including marketing referral information. Used for better segmenting and targeting of contacts, records ROI on purchase, abandoned cart and user survey functionality | Session to 1 year |
_GAT, __gsas, __gpi, __gpi_optout, NID, DSID test_cookie, id, __gads, GED_PLAYLIST_ACTIVITY, ACLK_DATA, receive-cookie-deprecation, , pm_sess, pm_sess_NNN, aboutads_sessNNN, FPAU ANID*, AID*, ar_debug, IDE, TAID*, FPGCLDC, _gcl_dc, _gcl_au, FLC. RUL, FCCDCF, FCNEC, FPGCLAW, FPGCLGB FPGSID, _gcl_gb, _gac_gb_<wpid>, _gcl_aw, GCL_AW_P, _gcl_gs _gcl_ag, 1P_JAR*, Conversion, YSC, VISITOR_INFO1_LIVE, VISITOR_INFO1_LIVE__k, VISITOR_INFO1_LIVE__default, FPLC, _ga, _gac_<wpid>, _gid _gat[_<customname>] __utma, __utmb, __utmc,__utmt, __utmz, __utmv, AMP_TOKEN FPID, GA_OPT_OUT _ga_<wpid> _dc_gtm_<property-id>, _gaexp, _gaexp_rc, _opt_awcid, _opt_awmid, _opt_awgid, _opt_awkid _opt_utmc, _gcl_gf _gcl_ha, PAIDCONTENT _opt_expid, APC, __eoi AEC, SNID, APISID, SAPISID, HSID, SID, SIDCC, SSID, LSID, OTZ, ACCOUNT_CHOOSER, 3PAPISID, 3PSID, _Secure-1PAPISID, _Secure-1PSID, _Secure-1PSIDCC, _Secure-1PSIDTS, _Secure-3PAPISID, _Secure-3PSID, _Secure-3PSIDCC, _Secure-3PSIDTS, _Host-1PLSID, __Host-3PLSID, __Host-GAPS, google_nid, google_hm, GTM-XSRF-TOKEN | Site customisation, marketing and targeting cookies. Often used by products such as Google’s Adsense, Analytics, Campaign, Display & Video 36, YouTube, Ad Manager, Search Ads 360, Funding Choices, Optimize, Hotel Ads Surveys products, Google Tag Manager | Various - from session to 2 years | |
| Hubspot | hubspotutk, __hstc, __hssc, __hssrc | Marketing analytics and lead tracking | Session to 13 months |
| bcookie, bscookie, lidc, li_gc, li_sugr, lang, AnalyticsSyncHistory, UserMatchHistory | B2B advertising and analytics synchronisation, storing guest user consent choices | Session to 2 years | |
| Kenshoo | Kenshoo_id | Campaign management and optimisation | 1 year |
| Mediamath | uuid, uuidc, mt_mop, mt_midc | Programmatic advertising and frequency capping | 1 year |
| Meta including Facebook, Instagram | C_user, xs, sb, dbln, datr, csrf, fr, _fbc, _fbp, oo, presence, dpr, wd, lastExternalReferrer, lastExternalReferrerTime, | Meta’s cookies for maintaining user logins, targeted advertising, conversion tracking, retargeting, attribution and site experiences | Up to 400 days |
| Microsoft Ads including Bing | MUID, MR, _uetvid, _uetsid, UserID1 | Advertising, analytics, cross-device tracking | Session to 13 months |
| Nativendo | withdomainNativendo, 588f272a3e49c_uuid, 588f272a3e49c_dmp_theadex | Native advertising and attribution | 1 year |
| Reddit Ads | d2_token, reddit_session | Advertising and session management | Session to 1 year |
| Salesforce | Guest_uuid_essential_siteID _sfid_$(domainHash), | Salesforce Marketing Cloud using cookies to identify page visitors and track activities | 1 to 2 years |
| Sizmek (an Amazon company) | u2, t1, OT2, Activityinfo2 | Ad delivery and measurement | Session to 1 year |
| Snapchat | _scid, _scid_r, _ScCbts, X-AB, _schn1, _screload, sc_at, _sctr, sc-cookies-accepted | Site customisation, marketing and targeting cookies/pixels, consent tracking | Session to 2 years |
| Splunk | _splunk_rum_sid | This is a site observability cookie that identifies/monitors site issues. | Up to 15 minutes |
| Stackadapt | sa-user-id, sa-user-id-v2, sa-user-id-v3, sa-user-id-v4 | Used for advertising delivery, measurement and personalisation | Up to 1 year |
| Surveymonkey | ep201,ep203, RP_XXXXXXXX, sso_user, CX_XXXXXXXX, P_XXXXXXXX, sm_ir, sm_rec, RZ | Used for bp site surveys for customers who have opted into advertising | Session to 1 year |
| The Trade Desk (TTD) | TDID, TDCPM, ttd_pid, ttd_id, ttd_tpi, syncdata_TTD | Programmatic advertising and audience targeting | Up to 13 months |
| TikTok | _ttp, _tt_enable_cookie, tt_viewer, cs | Site customisation, marketing and targeting cookies/pixels | Up to 13 months |
| TradeDoubler | TradeDoublerGUID, bt | Affiliate marketing attribution | 1 year |
| Viant | Cu | Site customisation, marketing and targeting cookies | Up to 1 year |
| X (formerly Twitter) | personalization_id, muc_ads, guest_id, guest_id_ads, guest_id_marketing, _twpid | Used for authentication and advertising personalisation for X.com logged in and logged out users | Up to 2 years |
| Yandex | i, ymex, yabs-sid, yandexuid, yuidss | Advertising and analytics | 1 to 2 years |