Skip to main content

Cookies and browser storage

Cookie Policy

This page lists the cookies and similar browser storage used by EBSA Support Plan. Last reviewed 11 September 2026.

Your choices

Necessary storage supports sign-in, saves work and remembers your preference. It cannot be switched off through this panel. The Google Tag Manager container and Google Analytics load only after you accept analytics. Stripe loads only when you choose to pay and allow external services. Zoom opens only when you select a private joining link after allowing external services. We do not use advertising or marketing tags.

Storage used by this site

NameTypeCategoryPurposeDuration
ebsa.consent.v2Local storageNecessaryRemembers your analytics and external-service choices and when you made them.Until you clear site data or replace your choice.
Account session key beginning sb- and ending -auth-tokenLocal storageNecessaryKeeps a signed-in account securely connected to the service.Refreshed during sign-in and removed when the session is cleared.
ebsa.snapshot.v1Local storageNecessarySaves a free Snapshot in this browser and carries it into an account so answers are not lost or repeated.Until the Snapshot is cleared or browser site data is removed.
ebsa.startHere.v1Local storageNecessarySaves progress through the Start Here questions before account creation.Until the journey is completed, cleared or browser site data is removed.
ebsa.assessment.draft.v1:[assessment ID]Local storageNecessaryKeeps a safety copy of an assessment during a poor connection and removes it after a confirmed save.Until the save is confirmed or browser site data is removed.
ebsa_funnel_visitSession storageNecessaryCreates a random per-tab key to prevent the same anonymous journey step being counted twice.Until the browser tab is closed.

Analytics cookies

These cookies can only be created after you accept analytics. Their exact appearance can vary because Google controls the analytics service.

NameProviderPurposeDuration
_gaGoogle Analytics 4Distinguishes one browser from another for anonymous usage measurement.Up to 2 years.
_ga_<container-id>Google Analytics 4Maintains the current analytics session.Up to 2 years.
_gidGoogle Analytics 4Distinguishes browsers for short-term usage measurement when created by Google Analytics.Up to 24 hours.
_gat or _dc_gtm_<property-id>Google Analytics 4 / Google Tag ManagerLimits the rate at which analytics requests are sent when created by the configured Google tag.Up to 1 minute.

Google Tag Manager

The Tag Manager container is not requested before analytics consent. It manages the analytics tags listed above and is not used for advertising.

ServiceContainerCategoryPurposeDuration
Google Tag Manager containerGTM-PZ4SSP3QAnalyticsLoads the site's consent-controlled analytics configuration. Tag Manager does not set a cookie itself. Google Analytics tags inside it may set the cookies listed above.Loads only after analytics consent; no separate GTM cookie.

Stripe payment cookies

Stripe stays blocked until you allow Payments and live workshops and actively open an embedded payment form. Stripe may create the following cookies on this site or on Stripe-controlled domains.

NameProviderPurposeDuration
__stripe_midStripeFraud prevention and secure payment processing.Up to 1 year.
__stripe_sidStripeFraud prevention during the current payment session.About 30 minutes.
mStripeHelps Stripe recognise the browser and prevent fraud.Up to 2 years.
private_machine_identifierStripeHelps Stripe secure and protect payment sessions when created by the embedded checkout.Provider controlled.
machine_identifierStripeHelps Stripe secure and protect payment sessions when created by the embedded checkout.Provider controlled.
sessionStripeMaintains the secure embedded checkout session when created by Stripe.Payment session.

Zoom website cookies

The site does not embed Zoom. After you allow Payments and live workshops and select your private joining link, Zoom opens on its own website and may create these cookies there.

NameProviderPurposeDuration
_zm_page_authZoomSupports authentication and security on Zoom's website.Zoom controlled.
_zm_ssidZoomSupports security and session integrity on Zoom's website.Zoom controlled.
_zm_ctaidZoomSupports Zoom website preferences and service operation.Zoom controlled.
_zm_mtk_guidZoomRecognises a browser visiting Zoom's website.Zoom controlled.
_zm_visitor_guidZoomRecognises a visitor on Zoom's website.Zoom controlled.
_zm_langZoomRemembers the language used on Zoom's website.Zoom controlled.
_zm_currencyZoomRemembers currency preferences on Zoom's website when applicable.Zoom controlled.
_zm_csp_script_nonceZoomSupports security controls for scripts on Zoom's website.Session.

Other services

Cookie names and durations controlled by Google, Stripe or Zoom can change when those providers update their services. This list reflects the services the site is configured to load. Stripe may place storage while its secure payment form is embedded. Zoom may place storage only after its website opens in a new tab. Both are blocked until you allow Payments and live workshops.

How to withdraw consent

Choose Cookie Settings in the footer at any time, switch analytics or external services off and save. This prevents future loading but cannot remove provider cookies already created, so use your browser controls for those. Clearing this site's necessary storage may sign you out or remove unfinished answers saved only on this device.

For more about how information is used, read our Privacy notice. Questions can be sent to Jessica@SimplifiedSupport.co.uk.