Cookie policy.
Last updated: 21 April 2026
We use cookies sparingly and only where they're essential for the site to work. No tracking cookies, no advertising cookies, no third-party analytics.
Cookies we set
- admin_session — set only if you sign into the admin
panel at
/admin. HttpOnly, Secure, SameSite=Lax, 7-day expiry. Removed when you sign out.
Tokens that aren't cookies
Employer dashboard access and alert-email unsubscribe use signed URL tokens rather than cookies. They live in the URL only and don't track you across the site.
Third-party cookies
We load Cloudflare Turnstile on pages with forms. Turnstile is a bot-defense challenge that may set short-lived Cloudflare cookies for its own abuse detection. We don't see or store these cookies.
When you pay, we redirect you to Stripe's hosted checkout. Stripe
sets its own cookies under stripe.com, governed by
Stripe's cookie policy.
Questions
Email jobs@vulnu.com.