COOKIE POLICY
Last Updated: October 3, 2026
1. Introduction
This Cookie Policy explains how CreepyCORE uses cookies and similar technologies (including localStorage and sessionStorage) when you access our OSINT platform, store, and related services. Under UK PECR and UK GDPR, analytics, marketing and payment storage is placed only with your consent. Functional storage is on by default and you can turn it off at any time.
On first visit you will see a banner with Accept All, Reject All (necessary only), and Customize. Reject All keeps only strictly necessary storage enabled and disables functional, analytics, marketing, and payment-related storage until you change your choice.
2. What Are Cookies and Similar Technologies
Cookies are small text files stored on your device by your browser. We also use localStorage and sessionStorage for the same purposes described in this Policy, subject to the same consent rules.
For authentication, licensing, and fraud prevention we may process device and session identifiers (for example, browser type and stable device IDs for CreepyEYE license management). These are not used for advertising, behavioural profiling, or selling personal data.
3. Types of Cookies We Use
3.1 Strictly Necessary
Important:
Essential cookies and storage cannot be disabled without breaking core functionality such as sign-in and security.
- HttpOnly session cookie for authentication refresh
- Session and user scope identifiers
- Cookie consent status and preference records
- Accessibility settings you choose (colour vision, text size, links, focus)
- CSRF and anti-abuse protection
- Load balancing and edge security
3.2 Security & Fraud Prevention
Used to detect abuse, protect accounts, enforce license device limits, and support multi-device authentication. Not used for advertising or behavioural profiling.
3.3 Functional (on by default)
Language, theme, layout, sidebar state, remembered device, dashboard preferences, and similar UX settings. On by default; Reject All or the Functional switch in cookie settings turns them off.
3.4 Analytics (consent required)
Consent Required:
First-party usage metrics and optional third-party analytics (such as Google Analytics) are activated only with your consent where GDPR or similar laws apply.
3.5 Payment & Store (consent required)
Shopping cart, checkout flow state, and related CreepyCORE store data. Stripe or other payment processors may also set their own cookies — see https://stripe.com/privacy — CreepyCORE does not control third-party payment cookies.
3.6 Marketing (consent required)
Optional promotional or campaign attribution storage. We do not use marketing cookies to sell personal data or for cross-site advertising profiling.
3.7 Third-Party Infrastructure
CDN, anti-bot, hosting, or edge providers (for example Cloudflare or Supabase) may set cookies according to their own policies where needed for security, delivery, and performance.
4. Data Collected Through Cookies
- IP address and approximate region
- Browser type and version
- Device type and operating environment
- Authentication and session state
- Security and abuse-prevention events
- License and device identifiers where required for account protection
- Usage metrics if analytics is enabled with consent
We do not use cookies or similar storage to sell personal data or for advertising profiling.
5. Cookie Duration
Session cookies and storage expire when you close the browser or end your session. Persistent items typically last from a few days up to one year depending on purpose. Security-related data may be retained longer where reasonably necessary for fraud prevention and account protection.
6. Managing Cookies
- Cookie banner on first visit — Accept All, Reject All, or Customize (Accept and Reject are shown with equal prominence)
- Profile → Settings → Privacy & Cookies at any time, including Reset consent
- Browser controls and private browsing modes
Warning:
Blocking essential cookies or storage may prevent sign-in, scans, device management, or checkout.
7. Legal Basis (GDPR / UK GDPR)
Strictly necessary and proportionate security storage: performance of our service and, where applicable, legitimate interests (fraud prevention and account protection). Functional storage: our legitimate interest in keeping the settings you choose, which you can switch off. Analytics, marketing, and payment storage: your consent via the banner or settings. You may withdraw consent at any time with the same ease as giving it, without affecting the lawfulness of processing before withdrawal.
8. Updates to This Policy
We may update this Policy from time to time. We will revise the “Last Updated” date and, where changes materially affect non-essential cookies or similar storage, provide prominent notice or request fresh consent as required by law.
9. Legal Jurisdiction
We aim to comply with UK GDPR, UK PECR, EU GDPR where applicable, CCPA/CPRA where applicable, and other local privacy laws.