Cookie and Tracking Policy

Current approach

Breached uses the minimum site technologies needed to provide search, intake, security, abuse prevention, performance monitoring, and preference storage. The public site does not use advertising pixels or sell/share cookie-derived data for cross-context behavioral advertising.

Technologies we may use

• Strictly necessary cookies or local storage for session, preference, security, rate-limit, or form-state features.
• Server logs and technical metadata such as IP-derived security data, user agent, timestamps, requested URLs, and error details.
• Privacy-preserving analytics or performance tools when configured to avoid unnecessary personal information and activated only after any required consent.
• Third-party company logo or favicon services only when the privacy notice discloses the provider.
• Consent or opt-out preference storage when a banner, privacy choice, or jurisdiction-specific workflow is enabled.

Technologies we avoid

• No advertising pixels on intake pages.
• No retargeting based on breach interest or intake behavior.
• No sale or sharing of cookie-derived personal information for cross-context behavioral advertising.
• No third-party scripts that collect raw intake form content.

Choices

You can control cookies through your browser settings. If Breached adds optional analytics or advertising technologies, Breached will provide any required notice, opt-out, or consent control before those technologies are active.

Global Privacy Control

Where applicable law requires it, Breached treats recognized opt-out preference signals such as Global Privacy Control as an opt-out of sale or sharing for targeted advertising.

Changes to tracking

If Breached changes its analytics, attribution, advertising, session-replay, or third-party script practices, Breached will update this policy where required.