This Cookie Policy explains how Scanworks Labs AG (trading as “Range”) uses cookies and similar technologies on our marketing website at range.org. It should be read together with our Privacy Policy. Our product application (app.range.org) and other Range properties may set additional cookies, such as session, security and bot-protection cookies, which are described where those services are provided.
1. What cookies are
Cookies are small text files a website stores on your device. Similar technologies, including pixels, beacons, local storage and session storage, also store or read information on your device. We use “cookies” to refer to all of these. They can be first-party (set by range.org) or third-party (set by another provider whose service we load), and either session cookies (deleted when you close your browser) or persistent cookies (kept until they expire or you delete them).
2. The categories we use
We group cookies into four categories, and where you are decides how they start. In the European Economic Area (EEA) and the United Kingdom (UK) nothing outside “strictly necessary” runs until you choose on the banner; elsewhere the optional categories start on and a notice says so. The footer “Cookie preferences” link changes your choices later and always beats the regional default.
| Category | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Security, abuse and bot prevention, and remembering your cookie choice. | No, the site can’t work without these. |
| Analytics & product | Measuring how the site is used and where to improve it (Google Analytics, Microsoft Clarity). | Yes. |
| Advertising & measurement | Measuring our paid campaigns on Google, LinkedIn and X (Twitter), and showing Range ads on LinkedIn and X. | Yes. |
| Functional | Optional embedded features, such as the Calendly demo scheduler. | Yes. |
We do not sell personal information. We do share online identifiers (cookie IDs, device identifiers, IP-derived signals) with Google, LinkedIn and X through the advertising cookies below, to measure our paid campaigns and retarget visitors, and we report some conversions from our servers (Section 5). Under the California Privacy Rights Act (CPRA) and similar US state laws both count as “sharing” for cross-context behavioral advertising; opt out in Section 6.
3. Cookies we set
Exact cookie names and lifetimes can change as providers update their products. The most material are listed below.
3.1 Strictly necessary
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| range-cookie-consent, range-geo-consent, range-cookie-notice | range.org (first-party) | Remember your cookie choices and consent region, and whether you have dismissed the cookie notice, so we don’t ask again. | Session to ~6 months |
| range:attribution-ft, range:attribution-lt | range.org (first-party) | Browser storage rather than cookies, recording how you reached range.org. | First visit ~90 days, most recent visit for the session |
| Vercel security / bot-protection cookies | Vercel (our host) | Protect the site from automated abuse and route traffic. Set as part of our hosting and bot protection. | Session to short-lived |
| Cloudflare Turnstile | Cloudflare | Checks that a form submission comes from a person, not a script. Sets no cookie on range.org. | Session |
3.2 Analytics & product
Google Analytics (Google Ireland Limited) provides aggregate website-usage analytics under Google Consent Mode: while analytics cookies are off it sends only cookieless, aggregated measurement.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique users. | 2 years |
| _ga_<id> | Persists GA4 session state. | 2 years |
| _gid | Distinguishes unique users (where loaded). | 24 hours |
| _gat | Throttles request rate. | 1 minute |
Microsoft Clarity (Microsoft Corporation) provides session replay and heatmaps, with input masking on so form-field values are not captured. It loads only while analytics cookies are on.
| Cookie | Purpose | Duration |
|---|---|---|
| _clck | Persists the Clarity user identifier across sessions. | 1 year |
| _clsk | Combines page views into a single session recording. | 1 day |
| CLID, MUID, ANONCHK, MR, SM | Microsoft identifiers used for measurement and synchronization. | 10 minutes to 1 year |
Vercel Web Analytics and Vercel Speed Insights (Vercel Inc.) give us privacy-friendly, aggregate page-view metrics and page-performance (Web Vitals) measurement. Both are cookieless and do not track you across sites, so they do not set cookies and run without requiring consent.
3.3 Advertising & measurement
These load only while advertising cookies are on: in the EEA and the UK after you accept them, elsewhere unless you switch them off. A Global Privacy Control signal leaves advertising off in every region until you choose otherwise.
Google Ads (Google Ireland Limited) measures conversions from our paid campaigns, on the same Google tag as Google Analytics. It may set the cookies below while advertising cookies are on; while they are off, Google receives only cookieless pings. Manage Google ad personalization at any time.
| Cookie | Purpose | Duration |
|---|---|---|
| _gcl_au | Stores an ad click reference so a later form submission can be credited to the ad that brought you. | 90 days |
| _gcl_aw | Stores the Google Ads click identifier (gclid) when you arrive from one of our ads. | 90 days |
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) measures our LinkedIn campaign performance and supports B2B audiences. You can manage LinkedIn ad settings at any time.
| Cookie | Purpose | Duration |
|---|---|---|
| bcookie / bscookie | Browser identifiers used for measurement and security. | 1 year |
| li_sugr | Probabilistic identifier for cross-device attribution. | 90 days |
| lidc | Routes requests to the right LinkedIn data center. | 1 day |
| UserMatchHistory, AnalyticsSyncHistory | Synchronize LinkedIn advertising identifiers. | 30 days |
X (Twitter) Pixel (Twitter International Unlimited Company) measures our X campaign performance and supports audiences. You can manage X personalization at any time.
| Cookie | Purpose | Duration |
|---|---|---|
| muc_ads | Browser identifier used for ads measurement. | 2 years |
| personalization_id | Used by X to personalize advertising. | 2 years |
| guest_id, guest_id_ads, guest_id_marketing | Identify the browser for measurement and marketing. | 2 years |
3.4 Functional
When you book a demo, we load Calendly’s embedded scheduler. Calendly may set its own cookies to operate the scheduling widget. Calendly’s handling of your data is governed by Calendly’s privacy policy.
4. Other technologies
- HubSpot lead capture. When you submit a form, we send the details to HubSpot (in its EU data region) from our server. This does not set a HubSpot cookie on range.org, because we do not load HubSpot’s website-tracking script.
- Email pixels. Marketing or transactional emails may include a small image to measure opens and clicks.
- Local and session storage. Used by our site framework to remember preferences and reduce repeat network calls.
- Server-side analytics. We infer aggregate usage from request logs without setting a cookie, on the basis of legitimate interests.
5. Conversions we report from our servers
Some advertising measurement happens on our servers: when you submit a form or book a call, we report that conversion to LinkedIn and X (Twitter), with the stored ad click reference where there is one. Google conversions are reported from your browser by the Google tag (Section 3.3).
Stopping it is the same action as stopping advertising cookies: “Reject all” on the banner, the Advertising category under “Cookie preferences”, or a Global Privacy Control signal sent before you choose. Our Privacy Policy sets out what we send, our legal basis, and when an off-site booking cannot carry your latest choice.
6. How to manage your preferences
- Cookie banner (EEA and UK). On your first visit: accept all, reject all, or customize by category. Nothing non-essential runs until you choose. The server-side reporting in Section 5 has its own opt-out, set out there.
- Cookie notice (everywhere else). Tells you cookies are running and links straight to the controls; switching a category off there stops it.
- Cookie preferences. Change your choices any time from the footer link on every page. Switching off Advertising is the US state-law opt-out of “sharing”, and also stops the Section 5 server-side reporting.
- Global Privacy Control (GPC). We treat a GPC signal as a valid opt-out of advertising cookies, the Section 5 reporting, and “sharing” for that browser, so advertising is off by default. A choice you make yourself takes precedence.
- Browser controls. Most browsers let you block or delete cookies. Blocking all cookies may affect site functionality.
7. Changes to this policy
We may update this Cookie Policy when we add or remove a provider, change the categories we use, or change how you opt out. Material changes will be posted here with a revised “Last updated” date.
8. Contact
Questions about this Cookie Policy? Email us or write to us.
Scanworks Labs AGGrafenaustrasse 56300 Zug, Switzerlandprivacy@range.org