Version 1.0 · Effective 2026-07-01
This is a plain-language explanation. For legally precise definitions and disclosure, please also read our Privacy Policy.
We use cookies and similar technologies to operate the Application securely, save your application progress, remember your consent choices, understand how the Application is used, and — only with your consent — measure the effectiveness of our advertising.
These are necessary for the Application to function. They enable security, session continuity, and the saving of your application progress. Without them, the Application could not operate reliably. Essential cookies do not require your consent under Canadian privacy law, but we explain them here for transparency.
These cookies enable non-essential features, such as campaign-attribution measurement using first-party data only. They are optional where they are not strictly required for the service you have requested.
With your consent, we use Google Analytics to understand how visitors use the Application — which pages are visited, how long visitors stay, and how they progress through the application steps. This helps us improve the experience. Google Analytics cookies are only set when you accept analytics cookies.
With your consent, advertising cookies from Google Ads enable conversion measurement so we can understand which campaigns bring visitors. Advertising cookies are only set when you accept advertising cookies. We do not use advertising cookies for behavioural retargeting or interest-based advertising through the Application.
First-party cookies are set by our domain (cipherx.ca). They include session cookies and consent-storage cookies.
Third-party cookies are set by domains other than ours — for example, cookies set by Google Analytics or Google Ads scripts loaded on our pages.
We use the following Google technologies on the Application:
Google may use the data it collects according to its own privacy policy. policies.google.com/privacy
Session cookies are temporary and are deleted when you close your browser. They maintain your session while using the Application.
Persistent cookies remain on your device for a set period (ranging from hours to two years, depending on the cookie) or until you delete them. They remember your preferences across visits.
In addition to cookies, we use browser local storage to save your application draft progress and your cookie-consent preferences. Local storage data does not expire automatically and is not sent to our servers with every request, but it performs a similar function. It is cleared when you clear your browser data.
When you arrive through a campaign link (for example, from a search ad or social-media post), we store the campaign source and parameters in local storage using first-party technology. This allows us to associate your application with the referring campaign without reliance on third-party cookies.
You can control optional cookies in several ways:
Most browsers allow you to block or delete cookies through their settings. Please note that browser-level cookie blocking may also disable essential cookies that the Application requires to function. Instructions for common browsers:
If you reject non-essential cookies, the Application will continue to function for its core purpose. Your application draft will still be saved, and you can still submit your application. However, we will not be able to measure your visit for analytics or advertising purposes, and certain non-essential features may not be available.
We may update this Cookie Policy when we add, remove, or change the cookies used on the Application. When we make material changes, we will update the version and date and, where required, request renewed consent.
This inventory reflects the cookies and storage technologies currently deployed. It was last verified on 2026-07-25.
| Key | Provider | Party | Duration | Purpose | Data | Consent |
|---|---|---|---|---|---|---|
| cipherx_workflow_draft | CipherX | first-party | Persistent (local storage) | Saves the user application draft progress so it can be restored if the browser is closed. | Form answers and step progress | Not required |
| cipherx_cookie_consent | CipherX | first-party | Persistent (local storage) | Remembers the visitor cookie-consent choices so the banner is not shown again. | Consent preferences and version identifiers | Not required |
CipherX
Persistent (local storage)
Saves the user application draft progress so it can be restored if the browser is closed.
Form answers and step progress
Not required
CipherX
Persistent (local storage)
Remembers the visitor cookie-consent choices so the banner is not shown again.
Consent preferences and version identifiers
Not required
| Key | Provider | Party | Duration | Purpose | Data | Consent |
|---|---|---|---|---|---|---|
| cipherx_campaign_attribution | CipherX | first-party | Persistent (local storage) | Stores first-party campaign parameters for attribution measurement. | Campaign source, medium, and session identifiers | Not required |
CipherX
Persistent (local storage)
Stores first-party campaign parameters for attribution measurement.
Campaign source, medium, and session identifiers
Not required
| Key | Provider | Party | Duration | Purpose | Data | Consent |
|---|---|---|---|---|---|---|
| _ga / _ga_* | Google LLC | first-party (set by Google Analytics) | Up to 2 years | Measures visitor behaviour and application-funnel performance. Only active when analytics consent is granted. | Pseudonymous client identifier, session statistics | Required |
Google LLC
Up to 2 years
Measures visitor behaviour and application-funnel performance. Only active when analytics consent is granted.
Pseudonymous client identifier, session statistics
Required
| Key | Provider | Party | Duration | Purpose | Data | Consent |
|---|---|---|---|---|---|---|
| _gcl_au / _gcl_* | Google LLC | first-party (set by Google Ads) | Up to 90 days | Stores campaign click information for advertising measurement. Only active when advertising consent is granted. | Campaign click identifier | Required |
| FPAU / FPGCLDC / FPID | Google LLC | first-party (set by Google) | Up to 90 days | Google first-party identifiers for conversion measurement. Only active when advertising consent is granted. | Pseudonymous conversion identifiers | Required |
Google LLC
Up to 90 days
Stores campaign click information for advertising measurement. Only active when advertising consent is granted.
Campaign click identifier
Required
Google LLC
Up to 90 days
Google first-party identifiers for conversion measurement. Only active when advertising consent is granted.
Pseudonymous conversion identifiers
Required
Questions About Our Cookie Practices?