Version: 3.1
Last updated: 09/04/2026
Applies to: The Schedule Validator application at https://app.schedulevalidator.com, including the sign-in screen
The short version
Schedule Validator uses two kinds of cookies.
Required cookies sign you in, keep your session secure, and remember your cookie choice. The application does not work without them.
Session recording and analytics cookies let us watch playbacks of how the application is used, so we can find problems in the application. Your schedule data is masked and never reaches the recording. They are off until you turn them on, and no cookie of any kind is placed on your device before you answer. If you decline session recording and analytics cookies, every feature works exactly the same.
Recordings are collected and assembled by Microsoft. Microsoft uses the data it collects for its own purposes, as well as ours, including advertising. Some of Microsoft’s cookies recognize your browser on other websites. Section 5 explains this in full.
We do not show ads in Schedule Validator, and we do not sell your information for money.
You can change your choice any time under Cookie settings.
1. Why we’re telling you this
This policy explains what cookies Schedule Validator uses, why, and what you can do about it. It covers the application itself, including the sign-in page. It does not cover other websites you may reach from links inside the product, or the systems of whichever organization gave you your account.
Our Privacy Notice https://www.schedulevalidator.com/privacy-policy covers how we handle personal information more broadly. If the two documents disagree, the terms in the Privacy Notice apply.
2. Who we are
SYLO MANAGEMENT LLC
197 E. California Ave. Ste. 300
Las Vegas, NV 89104
Questions about this policy, or about the personal information we hold about you:
Privacy Officer
privacy@sylomgmt.com
We are based in the United States, and so are most of our users. If you are in Europe or the United Kingdom, section 10 sets out additional rights that apply to you.
3. What a cookie is
A cookie is a small file a website stores on your device so it can recognize you on your next request. Related technologies — browser local storage, session storage, pixels — do much the same job. We say “cookies” throughout these terms and conditions to refer to all of these and related technologies and files.
Some cookies vanish when you close your browser; others stay for a set period. Some are set by us. Some are set by another company, on that company’s own domain — those are called third-party cookies, and they are the kind that can recognize your browser on other websites.
4. Required cookies
These are required for the application to function. They cannot be switched off, because switching them off breaks sign-in. Most are set by us. One is set by Google, as the table shows.
| What it does | Set by | Lasts |
| Keeps you signed in during your visit | Us | Until you sign out or close your browser |
| Protects your requests against a known class of web attack | Us | Until you close your browser |
| Sends your requests to an available server so the app stays responsive | Us | Until you close your browser |
| Remembers your cookie choice so we stop asking | Us | 12 months |
| Completes the sign-in handshake with your identity provider and protects it against tampering | Us | Until sign-in completes |
| Remembers where you had reached in the sign-in process | Us | Until you close your browser |
| Checks that a sign-in attempt comes from a person rather than an automated script, using Google reCAPTCHA | Set and expired by Google |
No required cookie is written before you answer the cookie question. The notice appears before you sign in, and nothing is stored on your device until you have made a choice.
5. Session recording and analytics cookies
What this actually does
If you turn these on, Microsoft Clarity will record how you use Schedule Validator. Clarity captures a replayable session: your mouse movements, scrolling, clicks and taps, and the content displayed on the screen as you work. We use the playbacks and the heatmaps built from them to find confusing screens and fix them.
These are off unless you turn them on. Nothing is recorded and no cookie is set before you choose, and declining costs you nothing.
What is hidden from the recording
Microsoft Clarity masks the text you type into form fields, so we see that you used a field but not what you entered. Passwords are always masked.
Schedule content is also masked. We have configured Clarity so that the schedule information displayed on screen — names, shifts, dates and other working data you view in Schedule Validator — does not appear in recordings and is not sent to Microsoft. What a recording shows is the shape of the page and how you moved through it: where you clicked, what you scrolled past, and where you hesitated. Not what the page said.
Recordings still contain information about you — which pages you visited, in what order, how long you spent, your approximate location and your device and browser. That is why we ask your permission first.
Who else gets this data, and what they do with it
Microsoft does not handle this data according to our instructions. Microsoft treats itself as independently responsible for the data Clarity collects, which means it uses that data for its own purposes as well as providing the service to us. Microsoft has represented to Sylo Management LLC that it uses this data to improve Microsoft products and services and to build user profiles for purposes that include advertising.
Microsoft’s use of this data is governed by the Microsoft Privacy Statement, not by this policy. We cannot control or restrict it on your behalf.
The cookies involved
Six are first-party, set on our own domain. Five are set by Microsoft on Microsoft’s domains, and those can recognize your browser on other websites.
| Cookie | What it does | Type | Lasts |
| _clck | Stores a Clarity user ID for this site | First-party | 1 year |
| _clsk | Groups your page views into a single recorded session | First-party | 1 day |
| CLID | Identifies the first time Clarity saw you on any website that uses Clarity | Third-party (Microsoft) | 1 year |
| MUID | A Microsoft browser identifier. Microsoft states this is used “for advertising, site analytics, and other operational purposes” | Third-party (Microsoft) | 390 days |
| SM | Synchronizes the MUID identifier across Microsoft domains | Third-party (Microsoft) | Until you close your browser |
| MR | Controls whether the MUID identifier is refreshed | Third-party (Microsoft) | 7 days |
| ANONCHK | Records whether MUID is passed to a Microsoft advertising cookie. Clarity sets this to 0, meaning it is not | Third-party (Microsoft) | 10 minutes |
| SyloSession-{env} | Groups your activity into one session so analytics events can be tied together | First-party | Session |
| ai_user | Recognizes a returning browser so our application-monitoring service (Azure Application Insights) can count how many separate people use the application | First-party | 1 year |
| ai_session | Groups a series of your actions into a single session so we can follow and diagnose a fault through the steps that led to it | First-party | 30 minutes from your last activity, and at most 24 hours |
| ai_authUser | Where the application links monitoring data to your signed-in account, records which account that is | First-party | Until you close your browser |
Source: Microsoft’s published Clarity cookie list.
The Microsoft lifetimes above are set by Microsoft, not by us, and we cannot shorten them. None of the cookies in this section is set without your consent, and none will be set again if you later opt out. Our own servers also read the value of the ai_session cookie when handling your requests; nothing further is stored on your device as a result.
How long the recordings are kept
We keep recordings for 30 days, after which they are deleted from our Clarity account.
Separately, Microsoft retains and uses the data it collects on its own account, for its own purposes, on its own timetable. Our 30-day setting does not govern that, and we are not able to delete Microsoft’s copy on your behalf. See the Microsoft Privacy Statement for how to approach Microsoft directly.
6. Your choices
Making a choice
Before you sign in, and before any cookie is written, you will receive a notice. You can accept the optional cookies, decline them, or open the settings panel and choose to allow cookies according to categories.
We do not treat scrolling, continued use, or dismissing the notice as a yes. If you do not make a choice, you will opt in to required cookies only.
Changing your mind
You may change your selection; to do so, select Cookie settings in the footer. You do not need an account and you do not need to be signed in.
If you are signed in, you may access this selection under My Settings, in the Communications section.
Turning recording off stops future recording immediately and prevents the Microsoft cookies in section 5 from being set again.
Switching recording off does not by itself erase recordings already made. Those are deleted on the 30-day cycle described in section 5, or sooner if you ask us — see section 9.
Using your browser instead
Every major browser lets you block or delete cookies and offers a private-browsing mode. Your browser’s help center has current instructions. Blocking required cookies means you will not be able to sign in and will limit the functionality of Schedule Validator.
7. What we don’t do
· We do not display advertising in Schedule Validator.
· We do not sell your personal information for money.
· We do not run advertising or retargeting campaigns aimed at you based on how you use Schedule Validator.
· We do not use social media pixels or share buttons.
· We do not add any tracking technology beyond what sections 4 and 5 describe above.
We cannot tell you that no cookie associated with Schedule Validator is ever used for advertising, or that nothing recognizes your browser elsewhere. As section 5 explains, several of the Microsoft cookies do both, for Microsoft’s own purposes. Google states that reCAPTCHA information, described in section 4, is used to provide and improve reCAPTCHA and for general security purposes rather than for personalised advertising.
8. Where the data goes
Our own systems. Schedule Validator runs on Microsoft Azure in United States regions. Your account data and the data from cookies are stored and processed there.
Service providers. We do not sell your personal information, but we do share some of it with the providers who help us run the service: our transactional email provider, our payment processor, and our customer relationship management system. They receive contact and account details — such as your name, email address, and billing details — and only what each needs to send you service messages, take payment, and manage our relationship with your organization. Cookie and session-recording data is not sent to them. Each is bound by a data protection agreement, and each processes the data on our instructions rather than for its own purposes.
Session recording data. This goes to Microsoft and is stored and processed under Microsoft’s own policies and procedures, which we do not control. See the Microsoft Privacy Statement linked in section 5.
9. Your privacy rights
You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. Contact privacy@sylomgmt.com and we will respond within 30 days. We will not treat you differently for asking.
If you ask us to delete your data, we will delete what is in our own systems. Session recordings are deleted automatically within 30 days in any event. We are unable to delete a specific user’s recordings on request prior to expiration of that 30-day period.
Because Microsoft is independently responsible for the data it collects through Clarity, we cannot delete Microsoft’s copy on your behalf. To ask Microsoft directly, use the contact route in the Microsoft Privacy Statement.
If you are accessing Schedule Validator on behalf of an employer, access to recordings, data, system analytics, and privacy information will be governed by local law and your employer’s agreement with Sylo Management LLC. Sylo Management LLC has no control over the employer’s access to that information, you should consult with your employer regarding the employer’s use of recordings and data.
Some US states — California, Virginia, Colorado, Connecticut, Texas and others — grant residents specific privacy rights, and several of those laws bind only companies above certain revenue or volume thresholds. We are currently below those thresholds.
10. Additional information for users in Europe and the United Kingdom
This section applies if you are in the European Economic Area or the United Kingdom. Everything above still applies to you as well.
Why we’re allowed to use these cookies
Required cookies are necessary to deliver the application you asked for. Under EU and UK cookie rules, strictly necessary cookies do not need your consent, but we still have to tell you about them, which we have accomplished under Section 4 above. Our handling of the personal data these cookies involve rests on our legitimate interest in operating and securing the service.
Session recording and analytics cookies rest on your consent, which we obtain before anything is set and which you may withdraw at any time.
Your rights under the GDPR
In addition to section 9, you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict how we use it; object to use based on legitimate interests; receive a copy of data you consented to us processing, in portable form; and withdraw consent at any time.
To exercise any of these, contact privacy@sylomgmt.com. We respond within 30 days. Where the data is held by Microsoft as an independent controller, we will tell you so and point you to Microsoft’s own process.
Our representatives in Europe and the United Kingdom
We have no establishment in the European Economic Area or the United Kingdom. As required by Article 27 of the GDPR we have appointed a representative in the EEA, and as required by Article 27 of the UK GDPR we have appointed a separate representative in the United Kingdom. Either may be contacted on all matters relating to the processing of personal data of individuals in the territory they cover. You may contact the representative for your territory instead of us, on any issue covered by this policy.
European Union / EEA representative
Instant EU GDPR Representative Ltd — attention: Adam Brogden
Office 2, 12A Lower Main Street, Lucan, Co. Dublin, K78 X5P8, Ireland
contact@gdprlocal.com
www.gdprlocal.com
United Kingdom representative
GDPRLocal Ltd. — attention: Adam Brogden
1st Floor, Front Suite, 27–29 North Street, Brighton, England, BN1 1EB
contact@gdprlocal.com
www.gdprlocal.com
Data leaving Europe
We are a United States company, and Schedule Validator runs on Microsoft Azure in United States regions. If you are in Europe or the United Kingdom, your data is stored and processed in the United States.
Because we collect your information directly from you rather than receiving it from someone in Europe, European guidance does not treat that collection as an international “transfer” needing a separate legal mechanism. Our obligations under the GDPR apply in full either way, wherever the data happens to sit.
Where we use service providers who handle your data for us, we rely on their transfer safeguards and make no representations or warranties as to those service providers’ compliance. Our hosting provider is Microsoft. Microsoft Corporation has represented to Sylo Management that it complies with the EU-U.S. Data Privacy Framework, the UK Extension to that framework, and the Swiss-U.S. Data Privacy Framework, and our agreement with Microsoft incorporates the Standard Contractual Clauses approved by the European Commission. Schedule Validator does not make any warranty as to Microsoft Corporation’s compliance with applicable non-US privacy frameworks listed above. Users must contact Microsoft Corporation to determine their compliance and to review their relevant terms.
Session recording data is not covered by those arrangements in the same way, because Microsoft handles it as an independent controller rather than on our behalf. Section 5 explains what that means.
11. Records of your choice
When you accept or decline, we record what you were shown, what you chose, and when. This lets us honor your preference and show that we asked properly. We keep these records for 12 months and use them for nothing else.
Your choice itself is stored for 12 months. After that we ask again.
12. Changes
If we add a cookie, change what an existing one is for, or switch providers, we will update this policy — and where optional cookies are involved, ask your permission again before the change takes effect. Material changes are announced in the application. The version and date at the top tell you which edition you are reading; earlier versions are available on request.
13. Contact
privacy@sylomgmt.com
Sylo Management LLC d/b/a Schedule Validator
197 E. California Ave. Ste. 300
Las Vegas, NV 89104
If you are in the EEA or the United Kingdom, you may also contact our representative for your territory, named in section 10.