Cookie Policy

What cookies are

Cookies are small files or browser storage entries that websites use to remember information. Similar technologies can include local storage, session storage, pixels, device identifiers, and server-side logs connected to browser activity.

Privca uses these technologies primarily for service operation and security, not to sell personal information.

Essential cookies

Essential cookies and storage may be used to keep you signed in, maintain session state, route requests securely, prevent cross-site request abuse, remember security choices, protect forms, support accessibility preferences, and keep the dashboard functioning.

If you run the free exposure scan, Privca sets one more essential cookie. It holds a random key that lets only your browser see that scan's progress and results, holds no name or place, and expires after two hours. If you then create an account from the scan, the browser tab notes the scan's number in its session storage until the new account brings the scan in.

These technologies are necessary for the service to work. If you block them, parts of the website or dashboard may not function.

Security and fraud prevention

Privca may use browser and server-side signals to detect suspicious login activity, rate-limit abuse, protect account recovery, reduce automated attacks, and investigate security events.

These signals may include IP address, user agent, request path, timestamps, session identifiers, device or browser characteristics, and related security logs.

Preferences

Privca may use local browser storage or cookies to remember user preferences such as theme mode, reduced-motion choices, accessibility preferences, or other interface settings.

Analytics and marketing

Privca uses no advertising, retargeting, or marketing technologies, and sets no cookie for measurement.

Privca does measure how the public marketing pages are used, and does it without identifying anyone. The measurement records a count of page views and of a fixed, published list of on-page actions, together with the day and time each count was recorded. It stores no cookie, no account or session identifier, no IP address, no name or email, no address bar contents beyond the page itself, and nothing typed into a form. Referrers are reduced to a single category such as search or social before anything is stored, and the full referring address is discarded. Because no identifier is stored, there is no key that links one recorded action to another or to a person.

This measurement runs only on the public marketing pages. It does not run in the customer dashboard, and it does not run for visitors whose browser sends a Global Privacy Control or Do Not Track signal. Records are kept for 90 days and then deleted automatically. Measurement is processed by Cloudflare, listed on the Subprocessors page.

If advertising, retargeting, or marketing technologies are added later, this policy will be updated to explain what is used, why it is used, and what choices are available before they are used.

Browser controls

Most browsers let you block, delete, or limit cookies and storage. If you disable essential cookies or storage, login, account security, dashboard functionality, billing flows, and request workflows may stop working correctly.

Global Privacy Control and Do Not Track

Privca does not sell personal information or use cross-context behavioral advertising as part of the current service. If the service later adds technologies that require opt-out signals, Privca will update this policy and respond to applicable legally recognized browser signals such as Global Privacy Control where required.

Some browsers send Do Not Track signals. There is no uniform industry standard for responding to Do Not Track, but Privca will continue to describe the technologies it uses in this policy.

Updates

Privca may update this Cookie Policy as the website, dashboard, security controls, analytics, or marketing practices change.