Legal

Cookies and storage

Estavelle's public site is built to work without tracking cookies. This page sets out what is stored on your device, what is sent anywhere else, and how to turn off the one thing that is optional.

Last updated: August 2026

What runs without asking you

Two things run by default.

Site analytics. We count page views and simple interaction events, such as which button was clicked or which step of the Asset Passport intake was completed. The session identifier is generated in memory when the page loads and is never written to your device: no cookie, no local storage, no session storage. It does not survive a page reload, so reloading starts a new session. There is no device fingerprinting of any kind, and if your browser sends a Do Not Track signal, nothing is recorded at all.

Signed-in sessions. If you sign in to a private area such as an account or the admin inbox, your browser holds a secure session in local storage. Without it the site cannot keep you signed in. This is strictly necessary and cannot be turned off while you are signed in.

What only runs if you turn it on

One optional tool, off unless you switch it on.

  • What it is: Microsoft Clarity, a session replay and heatmap tool, used to see where people get stuck in the Passport intake.
  • Who receives the data: Microsoft Corporation. Data is transferred to Microsoft and held under Microsoft’s own terms, not Estavelle’s.
  • Where it goes: Microsoft is based in the United States, so switching this on means your interaction data leaves the UK.
  • What is captured: Clicks, scrolling, viewport size, browser type, and an approximate location derived from your IP address.
  • What is not captured: The content of anything you type. All text and form fields are masked before anything is sent.
  • Where it does not run: Signed-in areas, admin pages, and any private link sent to you directly.
  • How long: Microsoft keeps recordings for around thirteen months.
  • How to switch it off: Use Cookie settings in the footer and set Measurement to off. The script is removed and its cookies and storage are cleared.

What Estavelle does not do

There is no Google Analytics on this site, no Google or Meta advertising pixel, no retargeting, and no cross-site tracking of any kind. Estavelle does not sell personal data and does not share it with advertisers. Where a third party is involved, it is named above.

Payments

If you pay through Stripe, Stripe sets its own cookies on its own checkout pages under its own privacy notice. Estavelle does not receive or store your card details.

Controlling your data

You can clear site data at any time from your browser. Clearing it will sign you out and reset your saved Measurement choice.

To change the Measurement choice on its own, use the link in the footer of any page. You can also read the fuller privacy notice.

Contact

hello@estavelle.co.uk