What does cloud.microsoft track?
Before any consent, cloud.microsoft loaded 2 tracking companies and set 3 advertising or analytics cookies.
That's fewer tracking companies than most sites we scanned: 56% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading m365.cloud.microsoft once and clicking nothing. How we scan
- Tracking companies
- 2
- Tracking cookies
- 3
- Third-party hosts
- 12
- Cookies in total
- 5
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
2 of the 4 companies it contacted before consent were analytics companies.
- Microsoft Clarity4 requestsAnalytics
a.clarity.ms, www.clarity.ms, scripts.clarity.ms
- Microsoft Azure Monitor1 requestAnalytics
js.monitor.azure.com
Other third parties (content delivery, consent, functional, unclassified)
- skype.com1 requestUnclassified
config.edge.skype.com
- Microsoft45 requestsFunctional
res.cdn.office.net, browser.events.data.microsoft.com, www.microsoft.com, admin.microsoft.com
Cookies set before consent
The longest-lived tracking cookie it set was MC1, from Microsoft, lasting about 12 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| MC1 | Advertising | microsoft.com (third party) | 12 months |
| MSFPC | Advertising | m365.cloud.microsoft | 12 months |
| MicrosoftApplicationsTelemetryDeviceId | Analytics | m365.cloud.microsoft | 12 months |
| ai_session | Functional | m365.cloud.microsoft | Under a day |
| MS0 | Functional | microsoft.com (third party) | Under a day |
The page also wrote 1 key to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.