Legal
Cookie policy
We use only what is strictly necessary to keep you signed in and protect forms. No advertising or cross-site tracking cookies.
Last updated
On this page3
Cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
__Host-vc_session | Keeps you signed in. HttpOnly, Secure, SameSite=Lax. | Session, or 30 days with “keep me signed in” |
__Host-vc_csrf | Protects forms against cross-site request forgery. | Session |
The landing pages of vulncrest.com do not read or set these cookies.
Local storage
The blog remembers your light or dark reading mode in your browser's local storage (vc-theme). It never leaves your device.
Third parties
Cloudflare Turnstile may set a cookie when a bot-protection check runs on sign-up, sign-in or Check my site. See Cloudflare's privacy policy for details.