EFFECTIVE: 1 JANUARY 2026LAST REVIEWED: 20 OCTOBER 2026
Cookie Policy (PECR & UK GDPR)
Transparent breakdown of essential security cookies, session tokens, and optional analytics used on HackGuardX.
UK Legal & Commercial Governance Notice: This document is structured in alignment with England & Wales commercial law, UK GDPR, and the Data Protection Act 2018. For custom enterprise or Managed tier amendments, contact legal@hackguardx.com.
Plain-English Summary
- Strictly necessary cookies keep your session authenticated and protect forms against CSRF and bot abuse.
- We prefer privacy-first, cookieless or first-party aggregated analytics wherever possible.
- You can withdraw or modify optional cookie preferences at any time.
1. How We Use Cookies and Local Storage
In accordance with the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR, this policy describes how HackGuardX uses cookies and browser storage on our website and web application.
2. Strictly Necessary Security & Session Cookies
These cookies are essential for the website and dashboard to function safely and cannot be switched off in our systems:
- •__Host-hr_session: Encrypted HttpOnly, Secure, SameSite=Lax authentication cookie for signed-in workspace users (Expires: 24 hours).
- •__Host-hr_csrf: Cross-Site Request Forgery protection token verifying form submissions (Expires: Session).
- •hr_rate_guard: Ephemeral abuse-prevention identifier protecting the Free Security Exposure Check endpoint from automated floods (Expires: 15 minutes).
3. Attribution & First-Party Performance Measurement
When you land on a HackGuardX campaign page with UTM parameters (such as utm_source or utm_campaign), we store those parameters in sessionStorage during your browser visit so we can attribute demo requests accurately without cross-site tracking cookies.
Questions about this policy or need a counter-signed UK GDPR Data Processing Agreement?