Cookie Policy

Required for the Site to function properly. These cannot be disabled.

• •Cookie consent preference: Remembers your cookie choice so we do not ask again (365 days)
• •Security tokens: Protect against spam and abuse on forms

We used to describe a visitor ID (vid) cookie here. It was retired in April 2026 and the server-side records it belonged to were retired in August 2026, so it is no longer set or used. If your browser still holds one from before then, it does nothing — you can delete it freely. See the Server-Side Analytics section of our Privacy Policy.

Help us understand how visitors interact with our Site so we can improve our advocacy resources. Google Analytics and PostHog cookies are written by default, which Canadian privacy law (PIPEDA Principle 4.3) permits for measurement of this kind where we tell you it happens and you can switch it off — this page is that notice, and “Essential Only” is that switch. The same default applies to every visitor from every country; since 16 September 2026 we no longer act on the Do Not Track or Global Privacy Control browser signals and no longer apply a separate opt-in default for the UK, EU or EEA. Two of the services below — Vercel and Google — still load in a cookieless mode if you choose “Essential Only”, so we describe each one's behaviour separately rather than implying the banner switches all of them off.

• •Google Analytics (operated by Google LLC, United States): Collects page view and interaction data. Google states that it does not log or store IP addresses for Google Analytics 4 properties. It starts in consent-granted mode for most visitors, and in Google's consent-denied mode — script still loaded, no analytics cookies written — only if you select “Essential Only”.
• •Vercel Analytics & Speed Insights (operated by Vercel Inc., United States): Collects aggregated page view data and Core Web Vitals performance metrics. Vercel Analytics is cookieless and does not build a profile of you. It runs for all visitors, including those who select “Essential Only”, because it sets no cookies.
• •Microsoft Clarity (operated by Microsoft Corporation, United States): Collects anonymised behavioural data including heatmaps and aggregated session recordings. No personally identifiable information is collected. You can opt out via Microsoft's privacy statement.
• •PostHog (operated by PostHog, Inc., United States): full product analytics — page views, clicks and the text on what you clicked, copied and selected text on public pages, scroll and engaged time, heatmaps, errors, load speed, device and browser details, and session recordings with every form and input field blanked out before it leaves your device. It runs only in your browser. Since 16 September 2026 it stores a random first-party identifier (cookie ph_…_posthog plus local storage, up to one year) by default so a returning browser is recognised. “Essential Only” stops it capturing entirely, and that is the only switch. Our server previously sent PostHog a page-request record containing your IP address; that was removed in August 2026 and no longer happens. See PostHog's privacy policy.