Legal

Cookie Policy

Effective date:August 18, 20263 days ago

Summary (Plain-English)

We use cookies and browser storage to run Huntertech.io, remember preferences, and measure traffic with Google Analytics when permitted by your consent choices, browser signals, and region. You can clear storage in your browser or decline analytics as described below.

Huntertech.io ("we", "us", or "our") uses cookies and similar technologies (including browser localStorage and sessionStorage) so the service works, so we can understand usage, and to remember preferences. This Cookie Policy explains what those technologies are, how we use them, and how you can manage them.

By continuing to use Huntertech.io, you confirm that you understand this Cookie Policy. If you do not agree to this Cookie Policy, you are prohibited from accessing or using the Services.

Nothing in this Cookie Policy is intended to create, nor does it create, contractual or legal rights enforceable by any party except as expressly provided. This Policy is subject to our Terms of Service and Privacy Policy, which include additional limitations of liability, dispute resolution, and other important terms.

1. What Are Cookies and Browser Storage?

Cookies are small text files stored on your device when you visit a website. They allow the site to recognize your browser and remember information about your visit, such as your preferences and activity, so your experience can be smoother and more efficient.

We also use browser storage technologies:

localStorage stores data in your browser until you clear site data or the key is removed by our app logic.
sessionStorage stores data for that tab/session until the tab or browser session ends (or the key is removed).

Cookies can be:

Session cookies that expire when you close your browser (we use session-style cookies without a Max-Age for some announcement dismissals).
Persistent cookies that stay until deleted or until they reach an expiry date we set (for example authentication-related cookies include a Max-Age).
First-party cookies set by Huntertech.io.
Third-party cookies that may be set by analytics endpoints when Google Analytics loads.

2. How We Use Cookies and Browser Storage

We use cookies and browser storage to operate the Services and remember settings. Specifically:

a. Essential Cookies and Strictly Necessary Storage

These support core functionality, including:

Authenticated sessions. We set a first-party cookie named supabase_token (HttpOnly, session authentication) (path /, SameSite=Lax, bounded lifetime) so your signed-in session can be recognized across navigations.
Signing out or session expiry clears or overwrites that cookie as implemented in our app.
Page routing, security, and session continuity within a visit.

Blocking essential cookies may break sign-in and other core features.

b. Analytics (Google Analytics 4)

We use Google Analytics 4 with measurement ID G-QQEXCCP4KT. The tag is loaded with Google's gtag.js script (served from www.googletagmanager.com). We do not operate a separate Google Tag Manager container snippet in our frontend; gtag is the Google Analytics 4 loader.

When it loads: After the window load event on most browsers, when our consent gate allows it (see bullets below).
iOS Safari only (iPhone, iPad, iPod Safari): We do not inject the Google Analytics script on that environment.
EU, EEA, and UK visitors: Google Analytics loads only after you explicitly opt in by saving accepted in cookieConsent (for example via the homepage banner when enabled, or by contacting us). Until then, GA does not load for visitors whose country is identified as an EU member state, EEA country, or the UK.
Declined consent: If localStorage key cookieConsent is declined, we do not load Google Analytics on that page load. That choice applies on each subsequent load until you clear storage or change the value.
Global Privacy Control (GPC): If your browser sends a Global Privacy Control signal, we treat it as equivalent to declining analytics cookies and do not load Google Analytics.
Other regions / no choice yet: Outside EU/EEA/UK opt-in regions, analytics may load on page load unless you have declined, sent GPC, or blocked the tag in your browser. Choosing Accept stores accepted for clarity.
Google Signals and ad personalization: We do not enable Google Signals or ad personalization features in our GA4 property configuration.

Google's privacy policy governs its processing. You can use Google's opt-out browser add-on https://tools.google.com/dlpage/gaoptout and browser controls alongside our Decline mechanism.

We do not ship a separate first-party error-reporting SDK alongside Google Analytics in our main web app entry; technical or diagnostic signals may still appear in Google Analytics depending on Google's product behavior and your browser environment.

c. Preferences, UI State, and localStorage

Examples include theme, sidebar layout, filters, layout toggles on vendor tooling pages, caches for performance, and dashboard layout data. Announcement dismissal uses cookies rather than localStorage.

Representative keys (not exhaustive):

theme light / dark preference
vendor-nav-collapsed vendor sidebar collapsed state
country-filters and category-filters filter selections used by incident and browse experiences
notificationReadStatus and related notification keys as implemented in our notification UI
Heatmap/chart selections (year/month keys on vendor scorecard tooling), remembered email on login flows, glance layout keys on the dashboard, vendor watchlist selections, tool-specific layout keys, and other feature flags or caches stored for UX and performance.
When the homepage consent banner runs: cookieConsent (accepted or declined) and cookieConsentDate (ISO timestamp).
announcement_dismissed_* cookies set on huntertech.io / www.huntertech.io (production) with domain=.huntertech.io, session-style until the browser session ends

d. sessionStorage (application state this session)

Representative keys include:

postLoginRedirectPath safe internal path remembered around OAuth/sign-in redirects
huntertech:uf-vendor-explicit.v1 vendor filter UX flag tied to unified filters on incident views
reloadAttempts and lastReloadTime guardrails for automatic recovery reloads in the shell

Other session keys may be added for routing or hydration; clearing session storage resets that state.

3. Third-Party Cookies and Pixels

When Google Analytics loads, Google may set or read identifiers per its policies. We do not list other third-party advertising pixels in our primary SPA shell beyond that analytics loader.

Third-Party Cookie Disclaimers: Huntertech.io does not control cookies set by third parties and is not responsible for their privacy policies or data practices. These third parties may collect information under their own terms. Review Google's documentation and policies for GA4/gtag.

User Responsibility: Removal or disabling of third-party cookies can be managed through provider opt-outs (for example Google's GA opt-out add-on) and your browser preferences. Huntertech.io disclaims liability for third-party cookie use tied to integrations we describe here.

4. Managing or Disabling Cookies and Browser Storage

You can manage storage in several ways:

Browser settings: Block or delete cookies; clear site data including localStorage and sessionStorage (often under Privacy or Site settings, or Developer Tools → Application / Storage).
Homepage banner: The consent banner is not currently active on all pages. Analytics behavior follows Section 2(b): declining via the mechanism described there (or via browser controls) blocks GA on subsequent loads, but does not retroactively affect data already collected. EU, EEA, and UK visitors are gated to opt-in before analytics loads; we are working toward opt-in consent gating for California visitors before analytics loads. In the meantime, use Google's opt-out add-on or your browser's tracking protection if you want to prevent analytics collection on first visit.
Google Analytics opt-out: Google's browser add-on is linked in section 2(b).
Global Privacy Control (GPC): If your browser sends a Global Privacy Control signal, we treat it as equivalent to declining analytics cookies under Section 2(b), without requiring a separate action from you.
Manual deletion: Remove individual keys or cookies through developer tools or device settings.

Assumption of Risk: By using our Services, you accept responsibility for managing storage on your device where our controls end. Blocking essential cookies may limit authentication and core features.

Disabling authentication cookies prevents staying signed in; see section 2(a).

5. Regulatory Compliance and Safe Harbor

Huntertech.io makes reasonable efforts to comply with applicable data protection and cookie regulations in the jurisdictions in which it operates, including but not limited to GDPR (EU/EEA/UK), CCPA (California), and other applicable privacy laws. However, Huntertech.io does not guarantee full compliance with privacy laws of all countries or regions.

International Compliance: For users in the EU/EEA/UK, applicable cookie consent requirements may impose additional obligations beyond what is described here. Nothing in this Cookie Policy limits any rights you may have under applicable law that cannot be waived by agreement, including the right to lodge a complaint with a competent data protection or consumer protection authority.

Huntertech.io disclaims any representation or warranty regarding compliance with all international cookie and privacy regulations, and you assume the risk of any non-compliance claims.

6. Limitations of Liability

To the fullest extent permitted by law, Huntertech.io and its affiliates, officers, directors, employees, agents, and licensors shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from or relating to the use of cookies or similar technologies, including but not limited to:

Issues of privacy, data protection, or unauthorized access by third parties;
Loss or exposure of information stored in cookies, localStorage, or sessionStorage;
Third-party cookie practices or data collection;
Failure of cookie consent mechanisms or user preferences;
Limitations on site functionality due to cookie or storage restrictions;
Any claims related to cookie tracking or monitoring.

These limitations apply regardless of the legal theory on which any claim is based, whether in contract, tort, negligence, strict liability, or otherwise, and even if Huntertech.io has been advised of the possibility of such damages. In jurisdictions that do not allow the exclusion or limitation of certain damages, some of the above limitations may not apply to you.

7. Dispute Resolution and Arbitration

Mandatory Arbitration: Any claims or disputes related to cookie use, tracking technologies, or privacy arising from this Cookie Policy are subject to mandatory binding individual arbitration in accordance with our Terms of Service. You waive class-action claims and agree to individual dispute resolution for all such matters. This arbitration agreement does not limit your right to file a complaint with a government agency or regulator, which may investigate your complaint independent of any arbitration proceeding.

Waiver of Class Actions: You waive your right to participate in any class, collective, or representative proceeding (including class action lawsuits) against Huntertech.io relating to cookies or tracking technologies. You also waive your right to a trial by jury in any matter relating to this Cookie Policy.

Governing Law and Jurisdiction: This Cookie Policy is governed by the laws of the Commonwealth of Virginia, United States, without regard to conflict of law principles. Users consent to the exclusive jurisdiction and venue as specified in our Terms of Service for all disputes relating to cookies or this Policy. You waive any challenge to jurisdiction or venue.

8. User Acknowledgement

By using Huntertech.io, you acknowledge that:

You have read and understood this Cookie Policy;
You are responsible for managing your cookie and storage settings where our product's controls don't cover your preference;
Disabling or rejecting cookies may limit certain functionality, particularly authentication (see Section 2(a)).

The Limitations of Liability in Section 6 govern how risk relating to cookies and tracking technologies is allocated between you and Huntertech.io, to the extent permitted by law.

9. Severability

If any provision of this Cookie Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable, or if such modification is not possible, severed from this Cookie Policy. The remaining provisions shall remain in full force and effect and shall not be affected by such invalidity, illegality, or unenforceability.

10. Changes to This Policy

We may update this Cookie Policy periodically to reflect changes in technology, law, or our business practices. The latest version will always be available at https://www.huntertech.io/legal/cookies.

Material updates will be communicated via website. Continued use of the Services after updates means you accept the revised Cookie Policy. If you do not agree to the modified Cookie Policy, you must cease using the Services immediately.