Cookie Policy

Owner: Global Data Protection Officer

Version: 2

Effective Date: February 13, 2025

Approvers: General Counsel/Chief Legal and Compliance Officer; Global Data Protection Officer; Information Technology Group, Chief Information Security Officer

Collaborators: Information Technology Group, Chief Information Security Officer

Strictly Necessary Cookies

Cookie Name

Description

Expiry Duration

Expiry Unit

__cf_bm

The __cf_bm cookie is a cookie necessary to support Cloudflare Bot Management, currently in private beta. As part of our bot management service, this cookie helps manage incoming traffic that matches criteria associated with bots. This is a CloudFoundry cookie

0

Days

BIGipServerab46web-nginx-app_https

This cookie name is associated with the BIG-IP product suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one that it is hosted on, but not always.

1

Year

JSESSIONID

General purpose platform session cookie, used by sites written in JSP. Used primarily to maintain an anonymous user session by the server.

0

Days

Performance Cookies

Cookie Name

Description

Expiry Duration

Expiry Unit

_ga

This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.  By default it is set to expire after 2 years, although this is customisable by website owners.

1

Year

_ga_xxxxxxxxxx

Used by Google Analytics to identify and track an individual session with your device.

1

Year

sa-user-id-v2

This cookie is used to identify the user's session on the website and is often associated with analytics or personalization.

1

Year

JSESSIONID

This domain is controlled by New Relic, which provides a platform for monitoring the performance of web and mobile applications.

1

Year

__utmt

This cookie is set by Google Analytics.  According to their documentation it is used to throttle the request rate for the service - limiting the collection of data on high traffic sites. It expires after 10 minutes.  For more information about Google’s processing of your personal data, please consult Google’s Privacy & Terms site.

0

Days

__utmb

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behavior and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30-minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit by a returning visitor. For more information about Google’s processing of your personal data, please consult Google’s Privacy & Terms site.

0

Days

__utmc

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behavior and measure site performance. It is not used in most sites but is set to enable interoperability with the older version of Google Analytics code known as Urchin.  In these older versions this cookie was used in combination with the __utmb cookie to identify new sessions/visits for returning visitors.

When used by Google Analytics this is always a Session cookie which is destroyed when the user closes its browser. Where it is seen as a Persistent cookie it is therefore likely to be a different technology setting the cookie. For more information about Google’s processing of your personal data, please consult Google’s Privacy & Terms site.

0

Days

__utma

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behavior and measures site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It is used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customized by website owners. For more information about Google’s processing of your personal data, please consult Google’s Privacy & Terms site.

1

Years

__utmz

This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behavior and measure of site performance. This cookie identifies the source of traffic to the site so Google Analytics can tell site owners where visitors arrive from. This cookie has a life span of 6 months and is updated every time data is sent to Google Analytics. For more information about Google’s processing of your personal data, please consult Google’s Privacy & Terms site.

6

Months

Functional Cookies

Cookie Name

Description

Expiry Duration

Expiry Unit

__cf_bm

This cookie is a Cloudflare Bot Management (CFBM) cookie used to help distinguish between human users and bots. Here are some details about it:

Purpose

1. The __cf_bm cookie is part of Cloudflare’s bot management system, which helps protect websites from automated traffic and malicious bots.

2. It is used to apply security measures, such as rate limiting, CAPTCHA challenges, or blocking bot traffic.
3. This cookie helps ensure that legitimate users can access a site while preventing bot-related abuse.

0

Days

_cfuvid

This domain is owned by Vimeo. The main business activity is: Video Hosting/Sharing

1

Year

vuid

This domain is owned by Vimeo. The main business activity is: Video Hosting/Sharing

1

Year

ar_debug

This domain is associated with LinkedIn's marketing services that provides retargeting for advertisers to reach audiences on LinkedIn.

1

Months

split

This domain is owned by Scribd which provides a digital library service, including e-book and slideshow sharing services via SlideShare.

1

Months

scribd_ubtc

This domain is owned by Scribd which provides a platform for sharing and distributing content such as ebooks, audiobooks, podcasts, magazines, and sheet music, as well as protecting intellectual property rights.

9

Years

Targeting Cookies

Cookie Name

Description

Expiry Duration

Expiry Unit

_mkto_trk

This cookie is associated with an email marketing service provided by Marketo. This tracking cookie allows a website to link visitor behaviour to the recipient of an email marketing campaign, to measure campaign effectiveness.

1

Year

_mkto_trk

This cookie is associated with an email marketing service provided by Marketo. This tracking cookie allows a website to link visitor behaviour to the recipient of an email marketing campaign, to measure campaign effectiveness.

1

Year

trwsa.sid

This cookie name is associated with Adobe’s marketing service Marketo Munchkin, which is used to create profiles for users of website and to track their activity across the website.

0

Days

trwv.uid

This cookie is used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.

1

Year

BIGipServerabrtp2_https

This cookie name is associated with the BIG-IP product suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one that it is hosted on, but not always.

0

Days

BIGipServerabrtp2_https

This cookie name is associated with the BIG-IP product suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one that it is hosted on, but not always.

0

Days

NID

This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer's adverts appear.

1

Year

AnalyticsSyncHistory

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

1

Months

bcookie

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

1

Year

lang

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

1

Year

li_sugr

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

2

Months

lidc

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

0

Days

UserMatchHistory

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

1

Months

browser_id

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It is used to provide services for embedding slide presentations into websites. Information collected via cookies on this domain can also be used for targeted advertising purposes.

4

Years

_GRECAPTCHA

This domain is owned by Google Inc. Although Google is primarily known as a search engine, the company provides a diverse range of products and services. Its main source of revenue however is advertising. Google tracks users extensively both through its own products and sites, and the numerous technologies embedded into many millions of websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer's adverts appear.

5

Months

bscookie

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

1

Year

JSESSIONID

This domain is owned by LinkedIn, the business networking platform, which is also part of Microsoft. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions.  For this reason it is classified as a primarily tracking/targeting domain.

1

Year

VISITOR_INFO1_LIVE

This cookie is used as a unique identifier to track viewing of videos

5

Months

VISITOR_PRIVACY_METADATA

YouTube is a Google-owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

5

Months

YSC

YouTube is a Google-owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

1

Year

__cf_bm

This cookie is a Cloudflare Bot Management (CFBM) cookie used to help distinguish between human users and bots. Here are some details about it:

Purpose

1. The __cf_bm cookie is part of Cloudflare’s bot management system, which helps protect websites from automated traffic and malicious bots.

2. It is used to apply security measures, such as rate limiting, CAPTCHA challenges, or blocking bot traffic.
3. This cookie helps ensure that legitimate users can access a site while preventing bot-related abuse.

0

Days

__Secure-ROLLOUT_TOKEN

YouTube is a Google-owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

5

Months