HomeCookie Policy
Privacy

Cookie Policy

This Cookie Policy explains how HyprVuln Labs ("we", "us", "our") uses cookies and similar technologies on our website and client console at hyprvuln.xyz, in compliance with the EU ePrivacy Directive (2002/58/EC) and the GDPR.

1. What Are Cookies

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help the website recognize your device and remember certain information about your visit, such as your preferences or actions.

2. Our Approach

We take a minimal approach to cookies. Our public pages are primarily static; the authenticated console uses essential cookies for account security. Optional PostHog audience measurement runs only on the English and French landing pages, after your consent. We do not use advertising cookies or social media pixels. We do not track you across websites.

3. Cookies We Use

Cookie Type Purpose Duration
__Host-session Strictly necessary Keeps you signed in to the client console. In local development the cookie is named hv_session. Up to 7 days, with a 12-hour idle limit
__Host-hv_oauth Strictly necessary Protects the temporary GitHub sign-in transaction. In local development the cookie is named hv_oauth_txn. 10 minutes
Stripe Strictly necessary When you proceed to payment, Stripe may set cookies required for fraud detection and secure payment processing. Per Stripe's policy

We do not use:

  • Automatic click capture, session recordings, or account-linked analytics
  • Advertising or retargeting cookies
  • Social media tracking pixels
  • Third-party marketing cookies

4. Third-Party Services

Our website uses or links to services with their own privacy policies:

5. Managing Cookies

Optional analytics remain off until you select “Accept all” or enable visit analytics and save your choices. “Reject all” is equally available; refusal does not restrict access. Use “Cookie preferences” on the landing page, this page or the privacy page to change your choice or withdraw consent at any time. Withdrawal stops future events and removes the analytics session identifier in that tab; other open tabs clear it when they receive the preference change. It does not erase previously received events. You can also control storage through your browser settings:

Common browsers

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Cookies and site permissions → Cookies and data stored

Please note that blocking all cookies may affect the functionality of certain website features, including payment processing.

6. Local Storage and Similar Technologies

In addition to cookies, websites can use other storage mechanisms such as localStorage and sessionStorage. The HyprVuln service uses local storage for UI preferences and an in-progress order draft.

The HyprVuln web app may additionally store in your browser a draft audit configuration (the plan and repository you are about to submit) and interface preferences such as your chosen language. Draft fields are sent to the service only when you submit the order; they can be cleared from your browser's site-data settings before then.

7. Do Not Track

We disable optional analytics when your browser sends Do Not Track (DNT) or Global Privacy Control (GPC), even if you previously accepted analytics.

8. Changes to This Policy

Changes to the purposes or technologies described here will be reflected in this policy and, where required, a renewed consent request.

9. Contact

For any questions about our use of cookies, email contact@hyprvuln.xyz.

You also have the right to contact the French data protection authority (CNIL) at www.cnil.fr.

See also our Privacy Policy.