Cookie Notice
Effective date: August 13, 2026 · Custodia, LLC
This Cookie Notice explains the cookies and similar technologies the BidFedCMMC platform uses. It supplements our Privacy Policy.
Inside the signed-in Service
Within your authenticated workspace we use only strictly-necessary, first-party cookies and similar local-storage entries, listed in full below. We do not place advertising cookies on your compliance data, and no cookie or tag we run is given access to your evidence, control responses, or attestations.
| Name / pattern | Purpose | Duration |
|---|---|---|
__session | Authentication session cookie set by Clerk, our identity provider. Required to sign in. | Session |
__client_uat / __clerk_* | Clerk session-state cookies (user authentication, CSRF protection). | Up to 1 year |
__Host-next-action / __next-router-state | Next.js framework cookies for routing and server-action validation. | Session |
localStorage: custodia.publicCharlie.v1 | Stores the in-page transcript of the public Charlie helper so your conversation persists on refresh. Local to your browser only. | Until cleared |
Analytics and marketing tags on our public pages
Our public marketing pages (the home page, landing pages, blog, and the free bid tools) load third-party scripts that help us measure traffic and identify which organizations are evaluating us. These are commercial marketing tools. They run on the public site and, where noted, across the application shell; they never receive your compliance content.
| Provider | What it does | Status |
|---|---|---|
| Vercel Web Analytics | Aggregate page-view and performance measurement. Cookieless; it does not store a persistent identifier in your browser. | Always on |
| Apollo.io | Visitor identification. Uses your IP address and a browser identifier to tell us which company is visiting, and, where Apollo offers it for U.S. visitors, to identify an individual visitor. This is behavioral identification for sales and marketing purposes. | Always on |
| Google Analytics / Google Ads | Traffic measurement and advertising conversion tracking. Sets Google's own cookies and identifiers. | On when an advertising campaign is running |
| LinkedIn Insight Tag | Advertising conversion tracking and audience measurement for LinkedIn campaigns. Sets LinkedIn's own cookies. | On when an advertising campaign is running |
| Sentry | Application error reporting so we can find and fix faults. Not used for marketing. | Always on |
| Calendly | Scheduling widget on pages that offer a call. Loads only on those pages and only to book the meeting you requested. | On specific pages |
We do not sell personal information, and we do not use these tags to make automated decisions about you. We use them to understand demand and to follow up with organizations that show interest in CMMC help.
Your choices
Essential cookies. Disabling these in your browser will prevent the Service from functioning (you will not be able to sign in). They cannot be turned off while you use your workspace.
Analytics and marketing tags. You can block these at the browser level with tracking protection or a content blocker, which we do not attempt to defeat. You can also opt out directly with the providers: Google Analytics opt-out, LinkedIn guest controls, and Apollo.io data removal.
Ask us directly. Under U.S. state privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, TDPSA, OCPA and comparable laws) you may opt out of the use of your personal information for targeted advertising. Email privacy@bidfedcmmc.com and we will suppress your information from these tools and from our marketing outreach. We honor the request whether or not you are a customer, and we will not degrade your service for making it.
Contact
Questions about cookies? privacy@bidfedcmmc.com