Legal

Cookie Policy

Last updated: June 2026

On this page

What are cookies
Our approach
Cookies we use
Legal basis under PECR
Third-party cookies
Managing cookies
Changes to this policy
Contact

What are cookies

Cookies are small text files placed on your device when you visit a website. They allow the site to remember information about your visit — for example, whether you are signed in, or whether your device has been previously verified.

This policy explains how Briefed Media Limited uses cookies across briefedmedia.com and id.briefedmedia.com, and the legal basis under which we do so.

Our approach

We use strictly necessary cookies only. We do not use advertising cookies, behavioural tracking cookies, or third-party analytics cookies. No cookie placed by Briefed is used to build a profile of you for advertising purposes or to track you across other websites.

Cookies we use

All cookies set by Briefed are served over HTTPS only (Secure), scoped to Briefed domains (SameSite=Lax), and are strictly necessary for secure operation of the service.

Cookie	Purpose	Lifetime	HttpOnly
briefed_session	Keeps you signed in between visits by referencing your server-side session. Without this cookie, you would need to sign in on every page load.	14 days, renewed with activity	Yes
bm_jwt	Short-lived token used to authenticate requests to Briefed APIs during an active session. Refreshed automatically while your session is valid.	1 hour	Yes
briefed_device	Set only when you explicitly mark a device as trusted. Allows the service to recognise that device on future visits, reducing the need to complete additional verification steps. You can revoke individual devices at any time from your account security page.	Up to 12 months, or until revoked	Yes
briefed_impersonation	Set only during a Briefed administrator support session. Displays a persistent banner so you can see that an administrator is temporarily accessing your account. Expires automatically when the support session ends.	1 hour	No

We also set short-lived, single-use tokens to protect against cross-site request forgery (CSRF) and to complete multi-step sign-in flows (for example, passkey and magic-link flows). These tokens are discarded immediately after use and are not stored beyond the current flow.

Legal basis under PECR

In the United Kingdom, the Privacy and Electronic Communications Regulations 2003 (PECR) govern the use of cookies. Under Regulation 6(4), cookies that are strictly necessary for a service explicitly requested by the user do not require consent.

All cookies described above fall within this exemption:

briefed_session and bm_jwt are essential for authenticated access to a signed-in account. Without them, the service cannot function for logged-in users.
briefed_device is set only in direct response to a deliberate user action (choosing to mark a device as trusted) and is necessary to deliver that specific feature. It is not set passively on all visitors.
briefed_impersonation is set only during a support session and is necessary to display the transparency banner required by our staff access policy.

We do not use cookies that require consent under PECR. If this changes, we will update this policy and implement appropriate consent mechanisms before placing any such cookies.

Third-party cookies

Briefed does not place third-party cookies on its websites. We do not use Google Analytics, Meta Pixel, advertising networks, or any other third-party tracking technology that sets cookies on your device.

Our infrastructure runs on Cloudflare, which processes requests at the network level. Cloudflare does not place tracking or analytics cookies on your device on our behalf.

Managing cookies

You can clear Briefed cookies at any time from your browser settings. Clearing briefed_session or bm_jwt will sign you out. Clearing briefed_device will remove the trusted-device record from your browser; the corresponding device record in your account will remain until you revoke it from your account security page.

Most browsers allow you to block cookies entirely. Blocking Briefed cookies will prevent you from signing in and using account features. Our public content (newsletters, CPIx, editorial) remains accessible without any cookies.

For guidance on managing cookies in your browser, refer to your browser’s documentation:

Changes to this policy

We will update this policy if we add, remove, or change any cookie. The “last updated” date at the top of the page reflects the latest revision. If we introduce cookies that require consent under PECR, we will implement a consent mechanism before placing them.

Contact

For questions about our use of cookies: privacy@briefedmedia.com

Briefed Media Limited, Ground Floor, 1 Spinningfields Square, Manchester, M3 3AP, United Kingdom.