Essential by default. Analytics by choice.
This policy lists every cookie and browser-storage item the CloudPMO website and platform use, what each one does, and how you can accept, reject or withdraw optional website analytics.
Version 1.0.0, effective 12 October 2026. The inventory below reflects the website as built today.
Definitions
A cookie is a small text file a website stores in your browser. Browser storage (localStorage and sessionStorage) is a similar mechanism that stays on your device and is not sent to the server with each request. This policy covers both, and any similar technology such as pixels or fingerprinting. We use no pixels and no fingerprinting.
Current inventory
The public website uses essential browser storage by default. Google Analytics cookies appear only after you accept analytics, and they are not used in the CloudPMO application.
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
cpm-announce-dismissed |
localStorage | Remembers that you closed the announcement bar so it does not reappear | Until you clear browser storage | Strictly necessary (user preference) |
cpm-analytics-consent-v1 |
localStorage | Records your analytics choice, policy version, decision time and expiry so the banner is not repeated on every page | 12 months or until the policy changes | Strictly necessary (consent record) |
_ga and _ga_G-PBDBSCMQ51 |
Cookies set by Google Analytics | Website-only page-view measurement after you accept analytics | 12 months | Optional analytics |
- Light or dark theme follows your operating-system preference and is not stored.
- Google Analytics loads only on https://www.cloudpmo.co.za after you accept analytics. It sends page views and GA4's automatic session events (first visit, session start and engagement time), and never sends application events, form contents, account or user IDs or advertising signals; it uses a random cookie identifier. Google may process this data outside South Africa, as described in section 5 of the Privacy Policy.
- This analytics is used on the website only and is not loaded in the CloudPMO application.
- No advertising, social-media or A/B-testing scripts are loaded. Microsoft Azure hosts the site and records standard server request logs described in the Privacy Policy.
- Newsletter sign-up is not yet active. When it is, it will use a double opt-in email confirmation rather than a cookie.
Strictly necessary cookies and storage
Once you sign in to your organisation's CloudPMO tenant, the platform uses browser storage and cookies that are required for authentication and security, and stores interface preferences you set. Without them the service cannot function, so consent is not required for them under POPIA or the GDPR, but you are entitled to know what they do.
| Purpose | Set by | Duration |
|---|---|---|
Sign-in token cache (msal. entries in browser storage) that keeps you signed in after authentication |
CloudPMO (Microsoft Authentication Library) | Until you sign out or the tokens expire |
| Your last selected tenant (localStorage) and short-lived sign-in state (sessionStorage) | CloudPMO | Tenant choice until you clear browser storage; sign-in state for the browser session |
| Interface preferences you set, such as dismissed help panels, planning units and saved board views (localStorage) | CloudPMO | Until you clear browser storage |
| Sign-in flow cookies used during the redirect to and from Microsoft Entra External ID | Microsoft (ciamlogin.com) | Set and governed by Microsoft's privacy statement; typically session |
| Checkout session during payment | Paddle international or Paystack South Africa (hosted checkout) | International sessions are governed by the Paddle Privacy Notice. For South African sessions, Paystack describes its own data handling in the Paystack Merchant Privacy Policy. Paystack is a payment processor, not a Merchant of Record. |
Exact cookie names for the platform will be added to this table before launch and kept current with each release; the changelog records additions.
How the website choice works
- Before analytics loads, the website asks you to choose Accept analytics or Reject analytics. Both choices have equal prominence, and no Google request is made until you accept.
- Your choice records the current policy version, decision time and a 12-month expiry. The footer's "Cookie preferences" control is available to change or withdraw it.
- Withdrawing consent disables analytics collection and removes CloudPMO's Google Analytics cookies; it does not affect processing that already happened.
- Google Analytics is configured for page views and GA4's automatic session events. Google Signals, advertising storage, personalised advertising and cross-domain application tracking remain disabled.
- This approach is designed to meet POPIA section 69 and section 11(1)(a), the EU ePrivacy Directive and GDPR for EEA Users, and the UK PECR for UK Users.
Your controls
You can view, block or delete cookies and site data in your browser settings (Chrome, Edge, Firefox and Safari each provide this under Privacy or Site settings). Blocking strictly necessary cookies will prevent sign-in to the platform. Clearing site data for cloudpmo.co.za removes the announcement-bar preference, and the bar will reappear on your next visit.
Browser signals
A Global Privacy Control signal is treated as a rejection of optional analytics. Do Not Track is not used because browsers do not provide a consistent standard for it.
Versioning
Each published version carries a version number and effective date. A material change to the analytics inventory, provider or retention period requires a new policy version and a fresh consent decision. Questions go to privacy@antsprojects.co.za.