Cookie Policy
Cookie choices and tracking transparency.
This policy explains how this site uses cookies, local storage, consent records, analytics or marketing tags where enabled, and privacy controls for GDPR, UK GDPR, California privacy rights, and child-directed-service boundaries.
What cookies and similar technologies do
Cookies, local storage, session storage, pixels, tags, and similar browser technologies can remember a visitor preference, keep a form or security flow working, measure site performance, or help understand whether a campaign reached the right audience.
Non-essential categories are off unless you choose them through the privacy controls. Essential records may still be used because they are needed for security, consent, accessibility, form protection, or basic site operation.
Cookie categories
- Essential: required for consent records, security controls, anti-abuse checks, session integrity, language or accessibility basics, and core form behavior.
- Functional: remembers optional choices that make the site easier to use, such as preferences that are not strictly required for basic operation.
- Analytics: helps us understand aggregate page usage, campaign journeys, performance, and content quality so we can improve the marketing experience.
- Marketing: supports attribution, lead-source understanding, audience relevance, and campaign measurement where those tools are enabled.
The exact cookies can change when providers, security controls, or campaign tooling change, but optional categories remain controlled by your consent choices.
How consent works
- The first-layer consent surface gives Reject all and Accept all equal prominence, plus Manage choices for category-level control.
- Consent is not implied by scrolling, closing the browser, or continuing to browse. Optional categories are enabled only from an affirmative choice.
- You can reopen privacy preferences at any time from the privacy controls and change or withdraw optional categories.
- If policy terms, categories, providers, or purposes materially change, the site can ask you to review your choices again.
Third-party and embedded services
- Security, hosting, email, consent, analytics, marketing, or anti-spam providers may set or read cookies only to the extent needed for their configured service and your consent choices.
- If embedded media, maps, video, social, or external content are added, those providers may set their own cookies when the content is loaded or interacted with.
- If WordPress comments, avatars, or Gravatar-backed profile features are enabled, Automattic or Gravatar may receive an anonymized email hash or related request data to check and display avatar information.
For personal-data processing details beyond browser storage, review the Privacy Policy linked from the same privacy controls.
California CCPA opt-out and browser signals
ThreatWarden does not sell personal information submitted through this public marketing site. If a future analytics or advertising configuration creates a sale or sharing of personal information under the CCPA, we will provide the required notice and opt-out control.
Where required or configured, privacy preference signals such as Global Privacy Control or Do Not Track can be used as opt-out signals for optional tracking categories.
Children, COPPA, and sensitive data
Consistent with FTC/COPPA child privacy expectations, this site is for business and professional audiences. It is not directed to children under 13, and optional tracking is not intended for child-directed profiling or advertising.
Do not submit sensitive personal data, credentials, secrets, private keys, regulated records, or confidential infrastructure details through public forms or consent surfaces.
Cookie and tracking profile
- Cookie and tracking inventory
- Essential:
- tw_consent_state: stores the visitor's privacy/category consent state and policy version. Current default retention is 180 days.
- Security, form-protection, anti-abuse, language, and operational records required for the site to function safely.
Functional:
- Optional preference storage may be used where enabled to remember non-essential usability choices.
Analytics:
- Analytics scripts run only if analytics handles are configured in ThreatWarden Ops -> Privacy and consent and the visitor allows analytics cookies.
Marketing:
- Marketing scripts run only if marketing handles are configured in ThreatWarden Ops -> Privacy and consent and the visitor allows marketing cookies.
WordPress/Automattic/Gravatar:
- If WordPress comments, avatars, or Gravatar-backed profile features are enabled, an anonymized email hash or related request data may be sent to Automattic/Gravatar to check or display avatar information.
Embedded content:
- Embedded media, maps, video, social widgets, or external content may set their own cookies when loaded or interacted with, if such embeds are added to the site. - Consent evidence retention
- The browser consent preference cookie is retained for the configured consent period, currently up to 180 days unless changed in the Privacy and consent settings or cleared by the visitor.
Consent evidence attached to lead, newsletter, or contact records is retained with the associated record so we can demonstrate when and how the visitor made a privacy, marketing, or category choice. - Privacy contact
- Last reviewed
- 2026-05-14
Retention and changes
Consent records and preference cookies are kept for the configured consent period unless you change choices sooner, clear browser storage, or a policy change requires a new review.
You can also control cookies from your browser settings. Blocking essential storage may cause parts of the site, forms, or privacy controls to work less reliably.