3. Types of Cookies We Use

CyberVault uses cookies and similar tracking technologies to ensure our website functions securely, to analyze how our services are used, and to deliver relevant content to our users. This section outlines the specific categories of cookies deployed across our digital properties, their purposes, durations, and legal basis for processing.

Transparency Notice: We only deploy cookies that are essential for security and functionality, or that improve your experience. You retain full control to modify or withdraw consent at any time via your browser settings or our cookie preferences center.

3.1 Cookie Categories & Purposes

We classify cookies based on their function and necessity. The following table provides a comprehensive inventory of cookie types used on cybervault.io and associated domains.

Cookie Type Purpose Provider Duration Essential?
_cv_session Maintains secure user session state, authentication tokens, and prevents session fixation attacks. CyberVault Session Required
_cv_csrf Generates and validates Cross-Site Request Forgery (CSRF) tokens to protect form submissions and API endpoints. CyberVault Session Required
_cv_pref_lang Stores user interface language and regional format preferences for consistent UX across visits. CyberVault 1 year Optional
_ga, _gid Google Analytics 4 tracking cookies used to measure site traffic, user engagement, and performance metrics. Google LLC 2 years / 24 hours Optional
_fbp, _gcl_au Marketing and advertising cookies that track conversions, retargeting campaigns, and campaign attribution. Meta / Google 3 months / 3 months Optional
_cf_bm, cf_clearance Cloudflare security cookies used to distinguish legitimate human traffic from automated bots and DDoS attacks. Cloudflare Session / 15 min Required

3.2 Detailed Breakdown

Strictly Necessary Cookies

These cookies are fundamental to the operation of our website and security infrastructure. They enable core functionalities such as secure login, CSRF protection, load balancing, and bot mitigation. Disabling these cookies will result in degraded functionality or loss of access to certain services. No consent is required under GDPR/ePrivacy Directive as they fall under the "technical necessity" exemption.

Performance & Analytics Cookies

We use these cookies to understand how visitors interact with our website. They help us measure page load speeds, identify broken links, track conversion funnels, and optimize user experience. All analytics data is aggregated and anonymized. We do not use these cookies to identify individual users or serve cross-site advertising.

Functional Cookies

Functional cookies remember your preferences (language, region, theme, dashboard layout) to provide a more personalized experience. They may be set by us or by third-party providers whose services we have requested to appear on our pages.

Marketing & Advertising Cookies

These cookies are set with your explicit consent and are used to deliver relevant cybersecurity insights, whitepapers, and product announcements based on your browsing behavior. We adhere to the Digital Advertising Alliance (DAA) and Network Advertising Initiative (NAI) self-regulatory guidelines.

Third-Party & Security Partner Cookies

CyberVault integrates with industry-standard security providers (Cloudflare, Sucuri, ThreatConnect) that deploy temporary cookies for real-time threat intelligence, geolocation blocking, and SSL/TLS handshake optimization. These are governed by separate data processing agreements and comply with ISO 27001 and SOC 2 Type II standards.

3.3 Managing & Withdrawing Consent

You can control and delete cookies through your browser settings. Instructions vary by browser:

Alternatively, you may use the Cookie Preferences Center to toggle specific categories on or off. Note that disabling certain cookies may impact site security, performance, or functionality.

Legal Basis: Necessary cookies rely on legitimate interest and contractual necessity (Art. 6(1)(b) & (f) GDPR). Analytics and marketing cookies process data based on explicit consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time without affecting the legality of processing prior to withdrawal.

Last Updated: January 15, 2025 • Section 3 of Cookie Policy v2.4