Cookies policy

1. What are cookies

Cookies are small text files stored on your device when you visit a website.

They may be used to:

Cookies do not grant access to your device or personal files.

• Ensure basic functionality
• Maintain secure sessions
• Preserve technical preferences
• Protect against automated abuse

2. Cookies used on this website

CERTCRYPT uses the following categories of cookies:

Essential cookies

These cookies are strictly necessary for the website to function securely and correctly.

They may be used to:

Essential cookies cannot be disabled.

Analytics cookies (optional)

If enabled, analytics cookies help us understand general usage patterns in aggregated form.

These cookies:

Analytics cookies are activated only if you provide explicit consent through the cookie banner.

• Maintain session integrity
• Protect against abuse
• Store cookie consent preferences
• Do not enable profiling
• Do not support behavioral advertising
• Are used solely to improve technical performance

The website currently uses a limited set of first-party cookies and closely related preference cookies.

3. Specific cookies currently used

The following first-party cookies are currently used by the public website:

• `certcrypt-locale` — stores language preference across public CERTCRYPT pages and, where applicable, related subdomains; persistent for approximately one year.
• `certcrypt-theme` — stores the currently resolved theme used to render the site; persistent for approximately one year.
• `certcrypt-theme-choice` — stores the visitor's explicit theme preference, including `system`, `light`, or `dark`; persistent for approximately one year.
• `certcrypt-site-consent-v1` — stores cookie consent preferences and consent state; persistent for approximately one year.

These cookies are first-party cookies controlled by CERTCRYPT for language, interface preference, and consent-management purposes.

4. Security and infrastructure-level cookies

Public CERTCRYPT websites may also be delivered or protected through Cloudflare infrastructure, and protected forms may use Cloudflare Turnstile for security verification and abuse prevention.

As a result, additional security-related cookies or equivalent browser-side technical mechanisms may be set where necessary for request proxying, traffic filtering, challenge handling, TLS termination, and abuse prevention, including cookies such as `cf_clearance`, `__cf_bm`, or `_cfuvid`, where applicable.

The specific security-related cookies or mechanisms used may vary over time according to the Cloudflare services and security configuration active when you access the website.

5. Local storage and similar browser storage

Some website functions may also use browser storage mechanisms other than cookies, such as localStorage or sessionStorage.

These mechanisms may be used for technical convenience, temporary draft preservation, consent-state migration, or interface behavior that does not need to be transmitted with every HTTP request.

Examples may include temporary preservation of contact form drafts, temporary UI state, or limited transitional handling of preference data.

Where such browser storage is used, it is handled with the same minimal and security-oriented approach described in this policy.

6. No marketing or advertising cookies

CERTCRYPT does not use advertising, profiling, or behavioral marketing cookies.

We do not use tracking technologies to display targeted commercial content.

7. Managing your preferences

When you first visit the site, you may:

You may change your preferences at any time by revisiting the cookie settings or clearing cookies in your browser.

You may also use your browser controls to block, delete, or restrict cookies, although doing so may affect language persistence, theme preferences, consent handling, and other website functions.

Essential cookies will remain active as they are required for secure operation.

• Enable optional analytics cookies
• Reject optional cookies
• Adjust your preferences

8. Retention

Cookies are stored only for the duration necessary to fulfill their technical purpose.

Some website cookies are session-based and expire automatically when your browser session ends.

Persistent preference and consent cookies used by the public website are generally configured for periods of up to approximately one year.

Infrastructure-level security cookies or equivalent mechanisms may use different durations depending on the security function involved.

9. Changes

This policy may be updated if website functionality changes.

The effective revision date is shown at the top of this page.