The short version
By default, yttsecunet.com and the console set only the cookies needed to deliver what you asked for: keeping you signed in, protecting forms against cross-site request forgery and keeping your session on a healthy server. Under Article 5(3) of the ePrivacy Directive (2002/58/EC) and regulation 6 of the UK Privacy and Electronic Communications Regulations, strictly necessary cookies do not require consent.
We do not run advertising, retargeting or social media trackers, we do not use third-party cookies, and we do not sell or share personal data for targeted advertising. That is why the site shows no cookie banner.
Strictly necessary cookies
All of these are first-party cookies set by yttsecunet.com, sent only over HTTPS, and never used to track you across other sites.
- Console session: keeps you signed in after SSO or password sign-in. Marked Secure and HttpOnly, and expires when you sign out or when the idle timeout set by your organisation's administrator is reached.
- Form security token: protects console and website forms, such as trial and contact requests, against cross-site request forgery. Expires at the end of the browser session.
- Load balancing: keeps your browser on the same healthy console instance during a session. Expires at the end of the browser session.
Analytics without cookies
We measure the website in aggregate with an EU-hosted analytics service that sets no cookies, stores no IP addresses and does not follow you across sites or from one day to the next. We see page views, referrers, browser type and approximate country, and nothing that identifies you. The console has no marketing analytics.
If you send a Global Privacy Control signal, or block the analytics script with a content blocker, the site works exactly the same and your visit is simply not counted.
If optional cookies are ever offered
No optional cookies are set today. If we introduce any, for analytics or anything else, they will stay off until you opt in. The consent banner will give Accept and Refuse equal prominence, nothing optional will load before you choose, and withdrawing consent will be as easy as giving it, from a link on every page. Your choice will be stored in a first-party consent cookie for 12 months, after which we will ask again. We will update this policy and its date before any such change takes effect.
Embedded and linked content
We do not embed social media widgets, advertising tags or third-party video players. Links to model provider documentation, regulators' websites and our public GitHub repository for ytt-verify take you to sites that have their own cookie policies, which we do not control.
Controlling cookies in your browser
Every major browser lets you see, block and delete cookies from its privacy settings, and most let you set rules per site. If you block all cookies for yttsecunet.com, the public website still works, but you will not be able to sign in to the console, because the session cookie is what keeps you signed in.
We treat a Global Privacy Control signal as a refusal of any optional cookies and as an opt-out of sale and sharing under US state privacy laws, though we do neither.
Questions
Email privacy@yttsecunet.com, or our Data Protection Officer at dpo@yttsecunet.com. Our Privacy Notice explains how we handle the personal data these cookies relate to.