Cookie Policy

Effective 2 July 2026 · LataSys Limited (UK Co. No. 17261093)

What is a cookie?

A cookie is a small text file placed on your device by a website you visit. Cookies are widely used to make sites work, to make them work more efficiently, and to provide reporting information. Similar technologies — local storage, session storage, web beacons — are covered by this policy too.

Cookies we set

Name	Purpose	Category	Retention
ls_consent	Remembers the choice you made in the cookie banner on this website. Set only by us, and set whichever way you answer.	Strictly necessary	180 days
_ga, _ga_GCCY50EJJK	Google Analytics 4. Distinguishes one visitor and one visit from another so we can see how this website is used and which adverts brought people to it. Set only if you accept analytics and advertising, and removed if you later decline.	Analytics and advertising	2 years / 2 years
ARRAffinity / ARRAffinitySameSite	Routes your requests to the same backend instance during your session. Set by Microsoft Azure App Service.	Strictly necessary	Session
MSAL local-storage entries (e.g. msal.<client-id>.idtoken)	Holds your Microsoft Entra ID sign-in state so you don't have to re-authenticate on every page.	Strictly necessary	Until sign-out
qrntn.taskpane.token.v1	Caches the Outlook add-in's API token between taskpane reopenings.	Strictly necessary	Until sign-out or token expiry
qrntn.nav.collapsed	Remembers whether you collapsed the sidebar.	Preference	1 year

Analytics and advertising

On this website we use Google Analytics 4, loaded through Google Tag Manager, to understand how the site is used and how well our advertising works. It is loaded on every page, but it is held in a consent-denied state until you accept: nothing is written to your device and no identifier is created while it is denied. If you decline, we still receive an anonymous, cookieless count of the visit, which cannot be tied back to you or to any other visit.

Google acts as our processor for this, and IP addresses are truncated before they are stored. If you accept, we also use Google Signals, which lets Google recognise the same visit across your devices where you are signed in to a Google account with ads personalisation switched on, and lets us show adverts to people who have visited this site. That is the advertising half of the choice, and declining it switches it off entirely. You can also turn ads personalisation off in your own Google account settings, which applies wherever you go, not just here.

Product telemetry

Separately, we use Microsoft Azure Application Insights for application telemetry — request timings, error reports, and aggregate usage. Telemetry is collected server-side from the API and from the Outlook taskpane via a small in-house relay (/diag/client-event). It is not advertising data and is not shared with any advertising network.

Strictly necessary vs other categories

Everything in the table above is either strictly necessary for the operation of the service you have asked for (PECR Reg 6(4)(b)), a limited user-preference item such as the sidebar-collapse marker, or in the analytics and advertising category, which is off until you turn it on. Nothing in that last category is set before you answer the banner, and rejecting is exactly as easy as accepting.

You can change your mind whenever you like: open your cookie preferences.

Managing cookies

You can control cookies through your browser settings — for example to delete existing cookies, block all cookies, or block cookies from specific sites. The ICO's guidance on cookies includes a useful explanation: ico.org.uk/your-data-matters/online/cookies .

If you delete or block the strictly necessary cookies listed above, you may not be able to sign in or use the service.

Questions

For any questions about cookies, contact us through our contact form.