Legal

Cookie policy

What this website and the CubeHR app store on your device, why, and how to change your choice.

Last updated 25 September 2026. Issued by Cube Systems Limited, trading as CubeHR, of Unit 11, Olney Business Park, Osier Way, Olney, Buckinghamshire, MK46 5FP. Registered in England and Wales, company number 17220899. ICO registration number ZC216972.

1What cookies are

Cookies are small text files that a website stores in your browser. Similar technologies, such as the browser's local and session storage, work in much the same way, and this policy covers all of them. Under the Privacy and Electronic Communications Regulations (PECR), a website must ask for your consent before storing anything on your device, unless it is strictly necessary to provide a service you have asked for.

2This website

cube-hr.co.uk sets no cookies unless you allow analytics. It carries no advertising, retargeting or social media tags, no session recording, and no embedded content from other sites that could set cookies of its own. Fonts, icons and images are served from our own servers.

When analytics is in use, a banner asks on your first visit whether to allow it. "Essential only" keeps the site free of cookies. "Allow analytics" lets Google Analytics set the _ga and _ga_<container-id> cookies. This is everything the website can store in your browser:

What this website can store in your browser
Name	Type	Purpose	Duration
`cookie_consent`	Local storage. Remembers your choice.	Records whether you chose “Allow analytics” or “Essential only”, so the banner does not ask again on every page. Written only when you choose.	Until you clear it
`visit_journey`	Session storage. Only sent if you enquire.	Notes the page you arrived on and when, the site that sent you, any campaign tags and ad click IDs in that first link, the previous page and how many pages you have viewed. It stays in this tab and only reaches us if you send an enquiry or register interest.	Until you close the tab
`cubehr_api_key`	Session storage. Only if you use the API tester.	Holds an API key you paste into the tester in our API documentation, so you do not have to paste it on every page. It is only sent to the CubeHR API when you run a request.	Until you close the tab or clear the key
`_ga`	Cookie. Analytics, only if you allow it.	Set by Google Analytics to tell one visitor from another, so that visits are counted rather than page loads.	Two years
`_ga_<container-id>`	Cookie. Analytics, only if you allow it.	Set by Google Analytics to keep the state of your visit, such as when it started and how many pages you have viewed.	Two years

cookie_consent, visit_journey and cubehr_api_key are kept in your browser’s storage rather than set as cookies, so they are not sent to us as you browse. The note in visit_journey is only sent if you submit an enquiry or register interest, when it is included with your message, as described in our privacy policy.

Our web server also keeps a standard log of requests. That is not a cookie and is covered by the privacy policy too.

3Google Analytics

We use Google Analytics 4 to see which pages are useful and how people find the site. It is provided by Google Ireland Limited, with Google LLC, and it runs only if you allow it.

The Google Analytics script only loads after you allow analytics. If you choose "Essential only", nothing is sent to Google.
_ga tells one visitor from another and _ga_<container-id> keeps the state of your visit. Both last two years unless you delete them.
GA4 does not log or store IP addresses.
Advertising features are off. The site tells Google not to use advertising storage, not to use your data for advertising and not to personalise ads.
Google may process the data in the United States, under the UK Extension to the EU-US Data Privacy Framework.
We keep analytics data for up to 14 months.

Google explains how it uses information from websites that use its services at policies.google.com/technologies/partner-sites.

4The CubeHR app

When you sign in to CubeHR, the app stores the following in your browser. None of it is used for analytics or advertising, and none of it is shared with anyone else. There is no tracking of your staff inside the product.

What the CubeHR app stores
Name	Type	Purpose	Duration
`auth_token`	Local storage. Strictly necessary.	Keeps you signed in to CubeHR, so the app knows it is you from one page to the next. Partner accounts use `partner_auth_token` in the same way. Never used for analytics or advertising.	Until you sign out or the session expires
`mfa_token`, `pending_user`	Local storage. Strictly necessary.	Hold a sign-in in progress while you set up or complete two-step verification.	Until you finish signing in
`cubehr-ui-theme`, `cubehr-text-size`, `cubehr-compact-mode`	Local storage. Your preferences.	Remember display choices you make, such as dark mode, text size and a compact layout.	Until you change them or clear them

Keeping you signed in is strictly necessary to provide the service you signed in for, so PECR does not require consent for it. Your display preferences are only stored when you change them.

5Changing your choice

You can change your analytics choice at any time using the Cookie settings link in the footer of every page, which appears whenever analytics is in use. Choosing "Essential only" there withdraws your consent: it stops Google Analytics and removes the _ga cookies it has set.

You can also view, block and delete cookies and stored data in your browser settings. Doing so does not stop this website working. Clearing the CubeHR app’s stored data signs you out, and clearing this site’s stored data means the banner asks you again on your next visit.

General guidance on managing cookies is available from the Information Commissioner’s Office.

6Changes to this policy

We will update this page, and the date at the top, before we change what either the website or the app stores on your device. Questions go to hello@cube-hr.co.uk.

Other policies

Questions about any of this? Email hello@cube-hr.co.uk, call 01234 672 617 or write to us at the address above.