| Cookie Name / Type | Provider | Purpose | Expiry |
|---|---|---|---|
| laravel_session (or equivalent) | Therapy World (First-party) | Used to identify and maintain a secure session for the user, allowing them to stay logged into their profile and submit registration/contact forms. | Session (cleared on browser close) |
| XSRF-TOKEN | Therapy World (First-party) | Provides CSRF (Cross-Site Request Forgery) protection, ensuring that form submissions come from our verified users and preventing malicious attacks. | Session / 2 hours |
| Cookie Name / Type | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga | Google LLC (Google Analytics) | Used to distinguish unique users by assigning a randomly generated, anonymous client identifier. | 2 years |
| _ga_CN4BCLGLTH (or _ga_<container-id>) | Google LLC (Google Analytics) | Used to maintain and persist session state and user interaction data across page loads. | 2 years |
| _gid | Google LLC (Google Analytics) | Used to store and count pageviews and distinguish users over a 24-hour window for daily traffic statistics. | 24 hours |
| _gat / _gat_gtag_* | Google LLC (Google Analytics) | Used to throttle request rate and limit data collection on high-traffic pages. | 1 minute |
| _clck | Microsoft Corporation (Clarity) | Persists the unique Clarity User ID and settings across page navigations to ensure consistent session analysis. | 1 year |
| _clsk | Microsoft Corporation (Clarity) | Connects multiple page views by a single user into an individual, aggregated session recording. | 1 day (24 hours) |
| CLID | Microsoft Corporation (Clarity) | Identifies first-time site visits across websites using Microsoft Clarity for aggregated statistical analysis. | 1 year |
| ANONCHK | Microsoft Corporation (Clarity) | Validates anonymous session data and indicates whether MUID is transferred to ANID for security and bot protection. | Session / 10 mins |
| MR | Microsoft Corporation (Clarity) | Used to reset or refresh the MUID cookie identifier. | 7 days |
| MUID | Microsoft Corporation (Clarity / Bing) | Identifies unique web browsers visiting Microsoft sites, utilized for reporting and telemetry. | 1 year |
| SM | Microsoft Corporation (Clarity) | Used in synchronizing the MUID identifier across Microsoft domains. | Session |
| Service Provider | Type / Name | Purpose | Expiry |
|---|---|---|---|
| Stripe | Payment / Fraud Prevention (e.g., __stripe_mid, __stripe_sid) | Stripe sets cookies to support secure credit/debit card processing and prevent fraudulent payments when you subscribe or pay for listings. | Various (from 30 mins to 1 year) |
| Google Maps / Places API | Mapping / Preferences (e.g., NID, SID) | Used to power postcode searches and display interactive therapist maps so users can find practitioners in their local area. | Up to 6 months |
| Google reCAPTCHA | Anti-Spam Security (e.g., _GRECAPTCHA) | Used to protect registration and contact forms from automated spam bots and malicious abuse. | 6 months |