Legal

Cookie Notice

Last updated:

This Cookie Notice explains how Open Security Inc (“Open Security,” “we,” “us,” or “our”) uses cookies and similar technologies on https://opensecurity.com (the “Site”). Read it together with our Privacy Policy.

Contact: contact@opensecurity.io
Mail: Open Security Inc, 12016 Alamo Ranch Pkwy, Suite 104, San Antonio, TX 78253

1. What are cookies?

Cookies are small text files stored on your device. Similar technologies include pixels, tags, scripts, and local storage that collect device or usage information. Some cookies are necessary for the Site to function. Others help us understand traffic, improve the Site, identify business visitors, or support advertising measurement.

2. How we use cookies

We group cookies and similar technologies into the following categories:

Category Purpose Examples on this Site
Strictly necessary Security, basic delivery, and remembering cookie choices HubSpot consent-preference cookies; Cloudflare security cookies where used
Analytics Understand traffic, performance, and how pages are used Google Analytics 4; Microsoft Clarity; HubSpot analytics cookies; Cloudflare Web Analytics (cookieless beacon)
Marketing and visitor identification Campaign attribution; B2B visitor identification; advertising measurement, including Google Ads features linked to GA4 RB2B cookies; HubSpot tracking cookies; Google _gcl_au

We use a HubSpot consent banner so you can manage cookie preferences. Banner behavior depends on your location:

  • United States. You may manage non-essential HubSpot cookie categories through the banner and Cookie Settings. Certain analytics and advertising technologies may involve a “sale” or “sharing” of personal information under California law. You may opt out through Your Privacy Choices. We honor Global Privacy Control (GPC) as described in our Privacy Policy. That choice and a detected GPC signal also tell HubSpot not to collect analytics or keep HubSpot analytics identifiers in that browser from then on. A request already sent may still complete. This does not delete information HubSpot already stored. Turning that choice off does not allow a HubSpot cookie category you denied. Cookie Settings is where those categories are changed.
  • EEA, United Kingdom, and Switzerland. We ask for your consent before setting non-essential cookies and similar technologies (including analytics, advertising measurement, and Microsoft Clarity). Strictly necessary cookies may be set as needed for the Site to function. You may withdraw consent at any time through Cookie Settings.

Other tools are disclosed in this Cookie Notice and our Privacy Policy. RB2B is used for person-level identification of U.S. visitors and company-level identification of visitors outside the United States. For visitors in the EEA, United Kingdom, and Switzerland, RB2B is used only after consent to the applicable cookies.

3. Cookies we use

Durations below are based on vendor documentation. Browser settings may shorten lifetimes. Cookie names may vary by configuration.

Strictly necessary / preference

Name Provider Purpose Duration
__hs_opt_out HubSpot Remembers opt-out from HubSpot cookies 6 months
__hs_do_not_track HubSpot Prevents HubSpot tracking code from sending information 6 months
__hs_initial_opt_in HubSpot Supports banner behavior in certain browsers 7 days
__hs_cookie_cat_pref HubSpot Stores HubSpot cookie category preferences 6 months
__hs_gpc_banner_dismiss HubSpot Remembers dismissal of GPC-related banner UI 180 days
__hs_notify_banner_dismiss HubSpot Remembers dismissal of notify-style banner UI 180 days
os_privacy_choice Open Security Remembers a U.S. sale or sharing choice for this browser (opt-out or opt-in). The same value is stored in local storage under os_privacy_choice. 1 year
__cf_bm Cloudflare Bot management / rate limiting (may appear on Cloudflare-fronted or HubSpot CDN hosts) 30 minutes
__cfruid / __cfuvid Cloudflare Rate limiting / session integrity on certain Cloudflare-fronted properties Session

Analytics

Name Provider Purpose Duration
_ga Google Analytics 4 Distinguishes users 2 years
_ga_<container-id> Google Analytics 4 Maintains session state 2 years
__hstc HubSpot Main visitor tracking cookie 6 months
hubspotutk HubSpot Visitor identity for forms and deduplication 6 months
__hssc HubSpot Session tracking 30 minutes
__hssrc HubSpot Detects a new session Session
_clck Microsoft Clarity Clarity user identifier / preferences for this Site 1 year
_clsk Microsoft Clarity Connects page views into a single session recording 1 day
CLID Microsoft Clarity Identifies the first time Clarity saw this browser on Clarity’s domain 1 year
ANONCHK Microsoft Indicates whether MUID is transferred to ANID (Clarity sets to 0) Session / short-lived
MR Microsoft Indicates whether to refresh MUID 7 days
MUID Microsoft Microsoft user identifier across Microsoft domains 1 year
SM Microsoft Used in synchronizing MUID across Microsoft domains Session
Cloudflare Web Analytics beacon Cloudflare Traffic and performance measurement; does not use cookies or localStorage for Web Analytics metrics N/A

HubSpot may also use browser storage (such as __hmpl and related keys) to buffer analytics events, depending on configuration and consent.

Marketing and visitor identification

Name Provider Purpose Duration
_gcl_au Google Stores campaign / click information for advertising measurement (including Google Ads features used with GA4) 90 days
_reb2bgeo RB2B Geolocation matching 20 days
_reb2bloaded RB2B Prevents duplicate script load 1 second
_reb2bref RB2B Referring URL attribution 15 days
_reb2sessionID RB2B Session identifier Session / temporary
_reb2buid RB2B Persistent visitor identifier 360 days
_reb2bfxf RB2B Internal identification framework 1 month
_reb2btd RB2B Identity resolution 1 month
_reb2bli RB2B Session-to-identity linking Session / temporary
_reb2bresolve RB2B Temporary identity-resolution buffer Temporary
_reb2butk RB2B Long-term unique token Up to 1 year

RB2B cookies are first-party cookies on our domain when set. They support person-level identification of U.S. visitors and company-level identification of visitors outside the United States. For visitors in the EEA, United Kingdom, and Switzerland, RB2B is used only after consent. Opt out of RB2B advertising association: https://app.retention.com/optout. GDPR opt-out for international company-level identification: https://www.rb2b.com/rb2b-gdpr-opt-out. See our Privacy Policy for the required RB2B narrative disclosure and for sale/sharing disclosures related to GA4/Google Ads, RB2B, and Clarity.

Google Fonts requests may send IP address and user-agent information to Google without setting a first-party analytics cookie on our domain.

4. How to change your choices

  1. Cookie Settings. Use Cookie Settings in the Site footer (or banner) to reopen the HubSpot consent banner, update preferences, or withdraw consent.
  2. Your Privacy Choices / Do Not Sell or Share (U.S.). See Your Privacy Choices. We honor Global Privacy Control (GPC) as a valid opt-out preference signal.
  3. Browser controls. You may block or delete cookies in your browser. Blocking all cookies may affect Site functionality.
  4. Vendor opt-outs.
  5. Email. Use unsubscribe links in marketing messages, or email contact@opensecurity.io.

5. Visitors in the EEA, United Kingdom, and Switzerland

If you access the Site from the EEA, United Kingdom, or Switzerland, we will request your consent before setting non-essential cookies and similar technologies. Until you consent, we will not set those non-essential cookies. You may withdraw your consent at any time by selecting Cookie Settings and updating your preferences. Further information about our processing of personal data, including legal bases and international transfers, is in our Privacy Policy.

6. Updates

We may update this Cookie Notice when our tools or practices change. The “Last updated” date at the top of this page will change when we do.

7. Contact

Open Security Inc
12016 Alamo Ranch Pkwy, Suite 104
San Antonio, TX 78253
Email: contact@opensecurity.io