Cookies
Cookie and tracker policy
This policy explains cookies and similar technologies used on Cyberhack Platform. The table is generated from the current product inventory.
Consent policy version: 2026-02
What is a cookie or tracker?
A cookie is a small file stored by your browser. Similar technologies include localStorage, sessionStorage, and third-party scripts or embeds that read or write identifiers. French and EU rules cover cookies and these other trackers.
How to accept, refuse, or change choices
On first visit you can refuse all optional trackers, accept them, or customise categories. Closing the banner without a choice is treated as refusal of optional categories. Use “Manage cookies” in the footer anytime. Refusal and acceptance are both stored so we do not ask again during the validity period (~6 months), unless the consent policy version changes.
Trackers currently identified
| Name | Provider | Purpose | Category | Storage | Duration | Consent |
|---|---|---|---|---|---|---|
| cspp_access_token | Cyberhack Platform | Authenticated API session | Strictly necessary | Cookie | Access token TTL (config, default ~15 min) | No (necessary / build) |
| cspp_refresh_token | Cyberhack Platform | Session renewal | Strictly necessary | Cookie | Refresh token TTL (config, default ~7 days) | No (necessary / build) |
| cspp_keycloak_state | Cyberhack Platform | SSO CSRF state | Strictly necessary | Cookie | 10 minutes | No (necessary / build) |
| cspp_keycloak_pkce | Cyberhack Platform | SSO PKCE verifier | Strictly necessary | Cookie | 10 minutes | No (necessary / build) |
| cspp_keycloak_locale | Cyberhack Platform | Locale after SSO | Strictly necessary | Cookie | 10 minutes | No (necessary / build) |
| cspp.consent.v1 | Cyberhack Platform | Store consent choices | Strictly necessary | localStorage | About 6 months | No (necessary / build) |
| cspp.guidance.draft.v2 | Cyberhack Platform | Continue access questionnaire | Strictly necessary | sessionStorage | Browser session / up to 7 days | No (necessary / build) |
| app-shell:left-rail-collapsed | Cyberhack Platform | Remember navigation rail state | Preferences | localStorage | Until cleared or consent withdrawn | Yes (optional) |
| cyberhack:dns:auto-refresh | Cyberhack Platform | Remember DNS live refresh preference | Preferences | localStorage | Until cleared or consent withdrawn | Yes (optional) |
| cspp.workflow.queueView | Cyberhack Platform | Remember workflow list view | Preferences | localStorage | Until cleared or consent withdrawn | Yes (optional) |
| _pk_* / Matomo | Matomo (configured host) | Audience measurement (Matomo), only after consent | Audience measurement | Cookie | Per Matomo configuration (first-party on the Matomo host) | Yes (optional) |
| Space Grotesk / Source Sans 3 | Google Fonts (next/font build) | Brand typography (self-hosted at runtime) | Build-time asset | Self-hosted after build | Build/CI only | No (necessary / build) |
Matomo loads only when enabled in platform admin and after analytics consent. Marketing and social embeds remain unused unless added later.