Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. They allow the website to recognize your device and remember information about your visit.

Types of Cookies:

• Session Cookies: Temporary cookies that expire when you close your browser
• Persistent Cookies: Remain on your device for a set period or until you delete them
• First-Party Cookies: Set by Bridgham (the website you are visiting)
• Third-Party Cookies: Set by external services (e.g., PostHog, Stripe)

2. How We Use Cookies

We use cookies for the following purposes:

2.1 Essential Cookies (Strictly Necessary)

Purpose: Required for the website to function properly. You cannot disable these cookies.

What they do:

• Remember your login session (authentication)
• Remember your cookie consent choice
• Enable secure checkout via Stripe
• Prevent CSRF (Cross-Site Request Forgery) attacks

Examples:

• session_token - Maintains your login session
• cookieConsent - Stores your cookie preference (essential/accepted)
• csrf_token - Security token for form submissions

Legal Basis: Legitimate interest (necessary for website functionality)

Retention: Session cookies (expire when browser closes) or up to 30 days

2.2 Analytics Cookies (Performance)

Purpose: Help us understand how visitors use our website so we can improve it.

What they do:

• Track page views, clicks, and navigation paths
• Measure website performance (page load times, errors)
• Identify popular content and features

Third-Party Services:

• PostHog: Tracks page views, clicks, and navigation paths

Examples:

• ph_<project_key>_posthog - Distinguishes users and stores analytics state (PostHog)

Legal Basis: Consent (off by default; you turn it on)

Retention: Up to 1 year

Your Choice: Analytics cookies stay off until you turn them on in our cookie banner's "Manage Preferences" (Your Privacy Choices) modal. Turning them off there also clears any analytics cookies already set.

2.3 Marketing Cookies (Currently Not Used)

Purpose: Display personalized ads based on your interests.

Status: We do not currently use marketing or advertising cookies. If we implement them in the future, we will:

• Update this Cookie Policy
• Obtain your explicit consent
• Provide clear opt-out options

2.4 Functional Cookies (Currently Not Used)

Purpose: Remember your preferences (e.g., language, region, theme).

Status: Not currently used. If implemented, these will be optional.

3. Third-Party Cookies

Some third-party services we use may set their own cookies:

We do not control third-party cookies. Review their privacy policies for details on their cookie practices.

4. How to Manage Cookies

You have several options to control cookies:

4.1 Cookie Consent Banner

When you first visit our website, you can choose:

• Analytics = Yes, Submit: Enable all cookies (essential + analytics)
• Analytics = No, Submit (or close the banner): Enable only strictly necessary cookies (analytics stays off)

Change Your Preference:

• Delete the cookieConsent entry from your browser's local storage
• Refresh the page to see the banner again

4.2 Browser Settings

Most browsers allow you to block or delete cookies:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy
• Edge: Settings → Privacy, search, and services → Cookies

Note: Blocking all cookies may prevent our website from functioning properly (e.g., you will not be able to log in or make purchases).

4.3 Opt-Out of PostHog Analytics

Open "Manage Preferences" on our cookie banner and set Analytics Cookies to No, then click Submit. This stops PostHog and clears the analytics cookies it set.

4.4 Do Not Track (DNT)

Some browsers support "Do Not Track" (DNT) signals. We currently do not respond to DNT signals, but we respect your choice to opt out of analytics cookies via our cookie banner.

5. Cookies We Use (Detailed List)

Essential Cookies

Analytics Cookies (Optional)

6. Legal Basis for Cookies

6.1 Essential Cookies

Legal Basis: Legitimate interest (necessary for website functionality, security, and contract performance).

No consent required under CCPA, GDPR, or state privacy laws.

6.2 Analytics Cookies

Legal Basis: Consent (optional cookies require your permission).

Consent mechanism: Cookie banner and "Your Privacy Choices" modal (Manage Preferences), with an Analytics Cookies toggle that defaults to off.

Your rights:

• Withdraw consent at any time via "Manage Preferences," or by clearing cookies or changing browser settings
• Turn PostHog analytics off via "Manage Preferences" on our cookie banner

7. Data Privacy and Security

What data do cookies collect?

• IP address
• Browser type, operating system, device type
• Pages visited, time spent, referral URL
• User ID (if logged in)

How is this data used?

• Improve website performance and user experience
• Analyze traffic patterns and popular content
• Troubleshoot errors and bugs
• Comply with legal obligations

Is data shared with third parties?

• Only with service providers (PostHog, Stripe, Cloudflare) as described in our Privacy Policy
• We do not sell cookie data to third parties

Data retention:

• Essential cookies: Deleted when you log out or after 30 days
• Analytics cookies: Retained by PostHog for up to 1 year

8. Children's Privacy

Our website is not intended for children under 18. We do not knowingly collect data from minors via cookies.

9. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our cookie practices or legal requirements.

Notification of changes:

• Updated "Last Updated" date at the top
• Prominent notice on our website (for material changes)
• Email notification (for significant changes)

Version history: Previous versions available upon request at support@bridghamcyber.com.

10. Contact Us

If you have questions about our use of cookies, please contact us:

11. State-Specific Cookie Rights

California Residents (CCPA/CPRA)

Under the CCPA, cookies used for "cross-context behavioral advertising" (targeted ads) may constitute a "sale" or "share" of personal information.

Current Status: We do not sell or share data via cookies (no targeted advertising).

Virginia, Colorado, Connecticut, Utah Residents

You have the right to opt-out of the "sale" of personal information or targeted advertising via cookies.

Current Status: Not applicable (we do not engage in these activities).

Colorado Residents (Universal Opt-Out)

As of July 1, 2024, Colorado law requires recognition of Universal Opt-Out (UOO) signals like Global Privacy Control (GPC).

Current Status: We will recognize GPC signals if we implement targeted advertising in the future.

12. International Data Transfers

Cookies set by third parties (PostHog, Stripe) may result in data transfers to the United States or other countries.

GDPR: If you are in the European Union, PostHog processes our analytics data on EU-hosted infrastructure by default; where a transfer outside the EU does occur, it relies on Standard Contractual Clauses (SCCs) to ensure GDPR compliance.

Appendix: How to Delete Cookies

Chrome (Desktop)

1. Click ⋮ (three dots) → Settings → Privacy and security → Cookies and other site data
2. Click "See all site data and permissions"
3. Search for "bridghamcyber.com" and click the trash icon

Firefox (Desktop)

1. Click ☰ (menu) → Settings → Privacy & Security
2. Scroll to "Cookies and Site Data" → Click "Manage Data"
3. Search for "bridghamcyber.com" and click "Remove Selected"

Safari (Mac)

1. Safari menu → Preferences → Privacy → Manage Website Data
2. Search for "bridghamcyber.com" and click "Remove"

Mobile Browsers

• Chrome (Android/iOS): Settings → Privacy → Clear browsing data → Cookies
• Safari (iOS): Settings → Safari → Clear History and Website Data