Cookie Governance & Privacy Center
AttackSurface maintains a zero-advertising, zero-cross-site-tracker architecture. Review our active cookie registry below and customize your preferences in real-time.
1. Strictly Necessary Cookies
Always ActiveThese cookies are vital for the cryptographic security, user authentication, and CSRF protection of AttackSurface. They cannot be disabled.
| Cookie / Storage Key | Purpose & Security Scope | Duration | Type |
|---|---|---|---|
| session_token | Cryptographically signed operator session credential for authenticated routes | 14 Days | HTTP-Only / Secure |
| csrftoken | Cryptographic nonces preventing Cross-Site Request Forgery attacks | Session | Cookie (SameSite Lax) |
| attacksurface_cookie_consent | Preserves your governance consent choices across visits | 1 Year | Cookie & LocalStorage |
2. Functional & Interface Preferences
OptionalThese cookies remember your interface preferences between browser visits, such as the White Aesthetic 3D canvas, sidebar pin state, and data density.
| Cookie / Storage Key | Purpose & Security Scope | Duration | Status |
|---|---|---|---|
| theme_preference | Remembers selected visual HUD theme (White Aesthetic 3D / Dark AMOLED) | 1 Year | ALLOWED |
| sidebar_collapsed | Saves your preferred operator navigation sidebar dock state | 1 Year | ALLOWED |
3. Operational & Diagnostic Telemetry
OptionalAnonymous first-party telemetry that measures API latency and detects client-side rendering crashes. We never sell data or share data with ad exchanges.
| Key | Purpose & Security Scope | Duration | Status |
|---|---|---|---|
| _as_perf_telemetry | Anonymous percentile latency aggregation across geographic regions | 30 Days | BLOCKED |
Ready to Save Your Choices?
Your preferences take effect instantly and synchronize across all open AttackSurface tabs.
4. Absolute Zero Advertising Guarantee
AttackSurface is a security intelligence system engineered for elite penetration testers, security engineers, and enterprise blue teams. We do not integrate Google AdSense, Facebook Pixel, LinkedIn Insight Tags, or commercial broker cookies. Your research activity, target watchlists, and observed differences are strictly private.