Cookie & Tracking Policy
This Cookie Policy explains how Danesh Habibi ("we", "us", or "platform") uses cookies, local storage, and privacy-preserving analytics on s1rbl4ck.com and associated platform domains. In compliance with the European Union General Data Protection Regulation (GDPR, EU 2016/679) and the ePrivacy Directive (Directive 2002/58/EC), we never set non-essential telemetry or analytics cookies without your prior, freely given, and verifiable consent.
Your Current Cookie Preferences
You can review, modify, or permanently revoke your consent choices at any time without reloading the page.
Always Active
Loading...
Not registered
1. What Are Cookies and Local Storage?
Cookies are small text files placed on your device by websites you visit. Local storage is a standard browser API providing key-value persistence without transmitting data automatically in every HTTP header.
We distinguish strictly between Necessary Technical Storage (which makes the site secure and functional) and Optional Analytics Telemetry (which measures aggregated usage trends). We never deploy cross-site tracking cookies, third-party marketing beacons, or social graph trackers.
2. Strictly Necessary Storage (No Prior Consent Required)
Under Article 5(3) of Directive 2002/58/EC and GDPR Recital 30, strictly necessary technical storage is exempt from opt-in consent because the service cannot be securely delivered without them.
| Identifier | Mechanism | Lifespan | Explicit Purpose |
|---|---|---|---|
| portfolio_cookie_consent | localStorage | 1 Year | Stores your consent choices, policy version (v1.0), and timestamp so you are not re-prompted on each visit. |
| better-auth.session_token | HTTPOnly Cookie | 30 Days | Cryptographically signed authentication token maintaining logged-in user portal sessions. |
| better-auth.csrf_token | HTTPOnly Cookie | Session | Mitigates Cross-Site Request Forgery (CSRF) across authenticated mutation endpoints. |
| portfolio.cart | localStorage | Persistent | Preserves software licenses and scan credit package selections in the checkout cart. |
| theme / next-themes | localStorage | Persistent | Remembers your dark/light interface preference to avoid flickering on initial render. |
3. Performance & Analytics Telemetry (Opt-In Consent Required)
We utilize Umami Analytics, an open-source, GDPR-compliant analytics platform. Unlike conventional analytics platforms, Umami operates without setting personal tracking cookies, does not collect IP addresses permanently, and does not build cross-device profiling dossiers.
Zero Telemetry Before Consent: The Umami script tag is completely withheld from the DOM until you click "Accept All" or enable analytics in Cookie Preferences. If you choose "Reject Non-Essential", no tracking script is ever downloaded and no analytics requests leave your browser.
| Identifier | Endpoint | Lifespan | Data Processed |
|---|---|---|---|
| Umami Tracker Script | umami.s1rbl4ck.com / cloud.umami.is | Cookieless / Daily Hash | Aggregated page views, referral domain, device viewport, and anonymized region. No fingerprinting, zero advertising exchange syndication. |
| umami.cache | localStorage (Client) | Session | Temporary client-side cache of anonymous session ID used to deduplicate page impressions within the same browsing session. |
4. Your Rights & How to Withdraw Consent
Under GDPR Article 7(3), you have the right to withdraw your consent at any time as easily as you gave it. When you withdraw consent:
- The tracking script is unmounted and permanently removed from the DOM.
- Any cached analytics session tokens in local storage are purged immediately.
- All future events and page navigations cease transmission without requiring a page refresh.
To manage cookies, click "Cookie Preferences" at the bottom of any page, or reach out to Danesh Habibi directly at [email protected].