Cookie Notice
What this site stores in your browser, why it is there, what is set only with your permission, and how to change your mind at any time.
1.What a cookie is
A cookie is a small text file that a website asks your browser to store. When you return, the browser sends it back, which lets the site remember something: that you are logged in, that you dismissed a banner, or that you already answered the cookie question.
Some technologies work similarly without technically being cookies. Local storage, session storage, and tracking pixels are the common ones. Where this notice says "cookies", it covers those too.
Cookies are not inherently harmful. The problem is not the technology, it is what people use it for. We use them for site function, for security, and, only with your permission, for analytics and advertising.
2.How consent works on this site
When you first visit, a banner appears with three options:
| Button | What it does |
|---|---|
| Accept All | Allows every category listed below |
| Reject All | Allows only strictly necessary cookies |
| Customize | Lets you turn individual categories on or off, then Save My Preferences |
Nothing beyond strictly necessary cookies is set until you choose. Rejecting is exactly as easy as accepting, one click, same prominence. We do not use pre-ticked boxes, hidden toggles, or any other pattern designed to wear you down.
Changing your mind
Your choice is not permanent. A small consent icon stays in the corner of every page. Click it at any time to reopen the preferences panel and change or withdraw your consent. Withdrawing is as easy as giving it.
How long your choice lasts
Your consent record is kept for up to 12 months, after which we will ask again. We also ask again if we add a new cookie category or materially change how we use cookies.
3.Cookie categories
Strictly necessary, always active
Required for the site to work securely: filtering malicious traffic, validating requests, and remembering the cookie choice you just made. They do not track you and are not used for marketing.
Functional, we use none
Would support optional conveniences such as embedded content or sharing features. Nothing in this category is currently set.
Analytical, only if you accept
Google Analytics, used to understand how the site is used so we can improve the publication, the content and the tools.
Advertisement, only if you accept
Used by our advertising partner to select, deliver and measure advertising. Decline this category and you may still see advertising, but non-personalised, chosen from the content of the page rather than from anything about you.
Password Studio carries neither. Several of its tools ask you to type a password you actually use, and we do not allow third-party code near those fields.
That rule follows what a tool handles rather than where it sits. Any tool that asks you to enter a password, a secret or a token is treated the same way. Tools that take no sensitive input, such as a generator that produces a value for you, may carry advertising and analytics like the rest of the site.
Unclassified
Cookies we have not yet categorised. Our aim is for this to be permanently empty. If something appears here, it means we have found a cookie we have not finished identifying. Tell us and we will chase it down.
4.Cookies in use
This is what is stored, what sets it, and how long it lasts. Storage periods are maximums: many entries expire sooner, and anything in a consent-based category is not set at all unless you accept that category.
| Purpose | Set by | Party | Category | Duration |
|---|---|---|---|---|
| Telling human visitors apart from bots, as part of attack filtering | Content delivery and security network | Third party | Strictly necessary | Up to 30 minutes |
| Applying per-visitor rate limits | Content delivery and security network | Third party | Strictly necessary | Session |
| Recording that a security challenge was passed, so you are not challenged repeatedly | Content delivery and security network | Third party | Strictly necessary | Up to 1 year |
| Storing your cookie preferences, and evidencing that consent was obtained | CyberDilmeth | First party | Strictly necessary | Up to 12 months |
| Telling one visitor apart from another, and keeping analytics session state | Google Analytics | Third party | Analytical | Up to 24 months |
| Selecting and delivering advertising, limiting how often you see the same advertisement, and measuring whether it worked | Advertising partner | Third party | Advertisement | As set by that partner |
The three attack-filtering entries are set at the network edge, before a request reaches our server. They are strictly necessary: without them we cannot filter automated attacks against this site.
Our advertising partner publishes its own cookie list and its own privacy policy.
We describe cookies here by purpose rather than by name, because names change when infrastructure changes and a stale list is worse than none. For the exact items your browser has received, open the consent panel using the consent icon in the corner of any page. That panel reflects the current state of this site, so if it ever disagrees with the table above, the panel is correct and we would like to hear about the discrepancy.
Functional
Nothing is set in this category. It appears in the consent panel because the consent tool lists all standard categories, not because anything is being used.
Password Studio
No advertising or analytics script is loaded on Password Studio, regardless of what you consent to. See section 3 for how that rule applies to other tools.
Signed-in users only
If you log in to the site as an author, editor or administrator, WordPress and our security layer set additional cookies to keep you signed in and to validate firewall sessions. These are never set for ordinary readers.
5.Our interactive tools do not store your input
Our password tools process what you type inside your browser. They do not write it to a cookie, to local storage, or to our servers.
The one exception to nothing leaving your browser is the Password Breach Check, which sends a five-character hash prefix to a third-party service so it can answer your query without ever learning your password. That mechanism is explained in full in section 6 of our Privacy Policy. It does not involve cookies.
No analytics or error-reporting script anywhere on this site is permitted to capture the contents of an input field.
6.Controlling cookies in your browser
Independently of our banner, your browser gives you control. You can usually block all cookies, block third-party cookies only, delete existing cookies, or clear everything when you close the browser.
You will find these under Settings → Privacy in Chrome, Firefox, Safari, Edge and Brave.
Be aware that blocking strictly necessary cookies entirely may cause parts of this or any other site to stop working.
You can also opt out of Google Analytics across all websites using Google's browser add-on at tools.google.com/dlpage/gaoptout.
Global Privacy Control
Where our consent tool supports the Global Privacy Control (GPC) signal, a browser sending GPC is treated as a refusal of non-essential cookies. If you send GPC and still see a cookie you did not expect, tell us and we will investigate.
7.Third-party links
Pages on this site link out to vendor advisories, government agencies, standards bodies and other primary sources. Those sites set their own cookies under their own policies. We have no control over them, and this notice does not cover them.
8.Changes
We will update this notice whenever our cookie use changes, and we will ask for your consent again where a change requires it. The version number and date above always reflect the current version.
9.Questions
Email [email protected].
If you find a cookie on this site that is not listed here, we would like to know. Tell us and we will either document it or remove it.
CyberDilmeth Cookie Notice v1.0, 22 December 2025.
See also: Privacy Policy · Terms of Use