This policy explains how Behind The SLA Pty Ltd (ABN 77 692 022 807), based in Melbourne, Australia (we, us, our), uses cookies and similar technologies on behindthesla.com.au and its subdomains. It should be read together with our Privacy Policy. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We keep this list factual and specific: it describes the cookies actually set when you use this site, not a generic template.
What are cookies and similar technologies?
Cookies are small text files a website stores on your device so it can recognise your browser on later requests. We also use closely related browser technologies, such as local storage and session storage, which keep small amounts of information on your device without using a traditional cookie. In this policy, references to "cookies" include these similar technologies.
Cookies can be "first party" (set by this site) or "third party" (set by another service we load, such as our analytics provider). They can last only for a single browsing session (session cookies) or persist across visits until they expire or you delete them (persistent cookies).
How we categorise the cookies we use
- Strictly necessary. Required for the site to load securely and for signed-in areas to function. These are always active and cannot be switched off through a preference on this site.
- Analytics and performance. Help us understand how visitors use the site so we can improve it. We use one analytics provider, Microsoft Clarity. These are not essential, and you can refuse them (see "How to control cookies" below).
- Preferences. Remember choices you make, such as a light or dark display theme, in the parts of the site that offer that choice.
We do not use advertising, marketing, or cross-site tracking cookies. See "What we do not use" below.
Cookies and storage we use
| Name | Provider | Category | Purpose | Expiry |
|---|---|---|---|---|
__cf_bm | Cloudflare (our security and content delivery provider) | Strictly necessary | Distinguishes humans from automated traffic to protect the site from abuse. Set only where bot mitigation is engaged. | About 30 minutes |
btsl_auth_token | Behind The SLA (first party) | Strictly necessary | Keeps you signed in to the invoicing or administration area. Only set if you log in to a restricted portal. Marked HttpOnly, Secure and SameSite=Strict. | Up to 7 days |
btsl_marketing_session | Behind The SLA (first party) | Strictly necessary | Maintains a session in the marketing or client workspace. Only set if you log in to that area. Marked HttpOnly, Secure and SameSite=Lax. | 4 hours |
_clck | Microsoft Clarity | Analytics | Stores a Clarity identifier for your browser so repeat visits can be counted. | About 1 year |
_clsk | Microsoft Clarity | Analytics | Groups the pages you view into a single session for analysis. | About 1 day |
theme | Behind The SLA (first party, local storage) | Preferences | Remembers a light or dark display preference in areas that offer a theme toggle. Public pages use a fixed dark theme and do not set this. | Until you clear it |
Microsoft may set a small number of additional cookies as part of the Clarity service (for example, an identifier such as MUID or CLID). The current list is maintained in Microsoft's own documentation, linked below. Some password-protected pages that share a document with a specific recipient also use session storage to remember, for the duration of your visit only, that you have unlocked that document.
Analytics: Microsoft Clarity
We use Microsoft Clarity to see how the site is used, through aggregated metrics and session replays that capture interactions such as clicks, scrolling, and page navigation. Clarity masks text and form input by default, and we do not use it to build advertising profiles. Clarity does record technical information such as your IP address, device and browser type, and approximate location derived from your IP.
Microsoft processes this information as an independent controller under the Microsoft Privacy Statement and may use it to provide and improve the Clarity service and other Microsoft products. You can read Microsoft's terms at privacy.microsoft.com/privacystatement and about Clarity at learn.microsoft.com/clarity.
Analytics cookies are enabled by default when you visit. You can refuse or remove them at any time using the controls in the next section, and doing so does not affect how the site functions.
What we do not use
- No advertising or marketing cookies, and no remarketing or ad-network pixels.
- No Google Analytics, Google Tag Manager, or Meta or LinkedIn tracking on this website.
- No selling of cookie data, and no use of cookies to build advertising profiles about you.
- No cross-site tracking of your activity on other websites.
Note: our outbound sales emails may contain a tracking pixel that records whether an email we send you is opened. That is separate from this website and is covered by our Privacy Policy.
Overseas data handling
Microsoft (Clarity) and Cloudflare are global providers and may store or process the technical and analytics information described above on servers outside Australia, including in the United States and the European Union. They handle that information under their own privacy commitments and applicable data-transfer safeguards.
How to control cookies
You have several ways to refuse or remove non-essential cookies:
- Your browser. Every major browser lets you block or delete cookies, block third-party cookies, or clear local and session storage. See the help pages for Chrome, Firefox, Safari, or Edge.
- Block the analytics provider. Blocking cookies from
clarity.msandc.clarity.ms, or using your browser's tracking protection, stops Clarity from setting its cookies. - Global Privacy Control. If your browser sends a Global Privacy Control or Do Not Track signal, you can use it to express your preference; support for these signals varies by provider.
Blocking strictly necessary cookies may stop parts of the site, particularly any signed-in area, from working correctly.
Changes to this policy
We will update this policy if the cookies we use change. When we make a material change we will revise the effective date shown below. We encourage you to review this page from time to time.
Contact and complaints
For questions about this policy or about how we handle your information, contact [email protected]. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Effective date: 21 July 2026.