Cookie Policy
Last updated: 26 October 2026
This page explains what CISO Times stores in your browser and what third-party services may set when you use the site.
Summary
Most pages can be read without accepting analytics cookies. The site uses:
- browser storage to remember your choices and to keep work in progress while you use a tool;
- two strictly necessary cookies, only if you sign in to a reader account;
- Cloudflare services to deliver and protect the site;
- Google Analytics only after you accept analytics cookies;
- Cloudflare Turnstile on forms, to reduce automated abuse.
We do not use advertising cookies, affiliate tracking cookies, social-media tracking pixels or cross-site marketing profiles.
What CISO Times stores in your browser
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
ct-consent | Local storage | Remembers whether you accepted analytics cookies, the date of the choice and the consent policy version. | Until you clear site data or the consent version changes. |
ct-theme | Local storage | Remembers whether you chose the light, dark or system theme. | Until you clear site data or change the setting. |
ct-gap-… | Local storage | Keeps your answers while you work through a gap assessment, so a refresh does not lose your progress. | Until you reset the tool or clear site data. |
ct-guidance-nav | Local storage | Remembers whether you collapsed the side navigation on Guidance pages. | Until you clear site data or change it. |
ct-memo-selection | Session storage | Holds the Guidance questions you picked for a memo. | Until you close the tab. |
ct-pulse-answered-… | Local storage | Notes that this browser answered a practitioner pulse question, so it is not asked again. It does not hold your answer. | 30 days. |
These records stay in your browser and are not sent to CISO Times. Gap-assessment answers leave your browser only if you ask for the emailed report. A pulse answer is sent only when you submit it, and the site keeps a count for each option, not your answer or anything that identifies you.
If you sign in
Signing in to a reader account sets two strictly necessary cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
__Host-ct_session | Keeps you signed in. It cannot be read by the page’s scripts. | 30 days, or until you sign out. |
__Host-ct_signed_in | Tells the page you are signed in, so it can show your account link. It holds no secret. | 30 days, or until you sign out. |
They are set only when you sign in, and they are how the site knows it is you.
Cloudflare
CISO Times is delivered through Cloudflare. Cloudflare may process technical request data such as IP address, user agent, URL and security signals to serve pages, route traffic and protect the site.
Cloudflare Web Analytics is used for aggregate site measurement. It does not set cookies or store anything on your device.
Cloudflare Turnstile appears on forms. It checks whether a form submission looks automated and may use Cloudflare-managed browser data or cookies for that security purpose.
Cloudflare may also set strictly necessary security cookies, such as cf_clearance, when a browser challenge is required. These keep the site available and distinguish legitimate traffic from abusive traffic.
Google Analytics
Google Analytics loads only if you accept analytics cookies. Until then, the Google Analytics script is not requested and no Google cookie is set.
| Cookie | Purpose | Typical lifetime |
|---|---|---|
_ga | Distinguishes one browser from another. | Up to 2 years |
_ga_<id> | Keeps state for this Google Analytics property. | Up to 2 years |
Advertising storage, advertising user data and ad personalisation are denied. This is audience measurement, not advertising.
Changing your choice
You can change analytics consent at the bottom of the Privacy Policy. Withdrawing consent deletes the Google Analytics cookies set for this site from this browser at once.
If your browser sends a Global Privacy Control signal, we treat it as a standing refusal for analytics cookies, and you will not be asked.
If your browser blocks site data, we cannot record your choice. Analytics then stay off, which is the safe outcome, and the banner tells you so rather than asking on every page.
You can also clear site data in your browser. That removes the records and cookies above for this site. If you do, we will ask about analytics again on your next visit.
Questions
Write to info@cisotimes.com.