Effective date: October 14, 2026
Last updated: October 14, 2026
Key takeaways
- We use a small number of strictly necessary cookies to run the site, keep accounts and carts working, and protect the site from attacks.
- Analytics and marketing cookies are off by default. They are only set if you choose to allow them.
- You can change your choice at any time using the Cookie Settings link, which is also available in the footer of every page.
- We honor Global Privacy Control (GPC) signals sent by your browser.
1. Introduction
This Cookie Policy explains how SecuritySage (“SecuritySage,” “we,” “us” or “our”) uses cookies and similar technologies on https://www.securitysage.org (the “Site”). It describes what these technologies are, why we use them, and the choices you have. It should be read together with our Privacy Policy, which explains in more detail how we handle personal information.
As a cybersecurity consultancy, we try to practice what we preach: we keep tracking to a minimum, we do not use advertising trackers by default, and we only use optional cookies when you agree to them.
2. What cookies and similar technologies are
Cookies are small text files that a website asks your browser to store on your device. Each time you return to that website, your browser sends the cookie back, which allows the site to recognize your browser and remember information such as whether you are logged in or what is in your cart.
- First-party cookies are set by the website you are visiting (in this case, securitysage.org).
- Third-party cookies are set by a different domain, for example an analytics provider.
- Session cookies are deleted when you close your browser.
- Persistent cookies remain on your device for a set period or until you delete them.
Similar technologies include browser local storage and session storage, which let a website store information within your browser. Unlike cookies, information in local storage is not automatically sent to our servers with each request. We use local storage for a small number of features that work entirely in your browser, described in section 5. In this policy, we use “cookies” to refer to cookies and these similar technologies together, unless we say otherwise.
3. Categories of cookies we use
3.1 Strictly necessary
These cookies are essential for the Site to work and to keep it secure. They enable core functions such as logging in to your account, keeping items in your cart during checkout, remembering your cookie consent choice and protecting the Site against malicious traffic. Because the Site cannot function properly without them, they do not require your consent and cannot be switched off through our cookie banner. You can block them in your browser, but parts of the Site, such as your account and checkout, will then not work.
3.2 Functional
Functional cookies and storage remember choices you make to give you a more convenient experience, for example remembering your name and email address for blog comments if you tick the box asking us to, or remembering your progress through an article checklist. Some functional features that store data only in your browser, at your request, are treated as necessary to provide the feature you asked for. Where functional cookies are not strictly necessary, we ask for your consent.
3.3 Analytics
Analytics cookies help us understand how visitors use the Site, for example which pages are visited most and how people find our content, so that we can improve it. We use analytics only if you give consent. If you decline, no analytics cookies are set. Where analytics are enabled, we configure them to minimize the data collected and do not use them to identify you personally.
3.4 Marketing
Marketing cookies are used to track visitors across websites in order to show relevant advertising or measure advertising campaigns. SecuritySage does not currently use marketing or advertising cookies. If we introduce them in the future, they will be set only with your consent, and we will update this policy first.
4. Cookies used on the Site
The table below lists the typical cookies used on the Site. The exact cookies set on your device depend on how you use the Site (for example, whether you log in, add a program to your cart or accept analytics). Some cookie names include a unique string, shown here as an asterisk (*). Durations are approximate and may vary with software updates.
| Cookie name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
wordpress_logged_in_* |
securitysage.org (WordPress) | Strictly necessary | Indicates that you are logged in and identifies your account session. | Session, or 14 days if you choose “Remember me” |
wordpress_sec_* |
securitysage.org (WordPress) | Strictly necessary | Stores secure authentication details for logged-in users and protects the account area. | Session, or 14 days if you choose “Remember me” |
wordpress_test_cookie |
securitysage.org (WordPress) | Strictly necessary | Checks whether your browser accepts cookies before you log in. | Session |
wp-settings-* and wp-settings-time-* |
securitysage.org (WordPress) | Functional | Remembers interface preferences for logged-in users, such as account dashboard layout. | 1 year |
comment_author_*, comment_author_email_*, comment_author_url_* |
securitysage.org (WordPress) | Functional | Remembers your name, email and website for future comments, only if you tick the box to save them. | Approximately 1 year |
woocommerce_cart_hash |
securitysage.org (WooCommerce) | Strictly necessary | Helps WooCommerce detect when the contents of your cart change. | Session |
woocommerce_items_in_cart |
securitysage.org (WooCommerce) | Strictly necessary | Records whether your cart contains items, so the cart displays correctly. | Session |
wp_woocommerce_session_* |
securitysage.org (WooCommerce) | Strictly necessary | Contains a unique code that links your browser to your cart and checkout data. | 2 days |
cookieyes-consent |
securitysage.org (CookieYes) | Strictly necessary | Stores your cookie consent choices so that we can respect them on later visits. | 1 year |
wfwaf-authcookie-* |
securitysage.org (Wordfence) | Strictly necessary | Set for logged-in users with editing permissions so the Wordfence firewall can recognize them and apply the correct security rules. | 12 hours |
_ga |
Google Analytics (only if enabled) | Analytics (consent required) | Distinguishes unique visitors to produce aggregate usage statistics. | 2 years |
_ga_* |
Google Analytics (only if enabled) | Analytics (consent required) | Maintains session state for aggregate usage statistics. | 2 years |
Our payment processors (such as Stripe or PayPal) may set their own cookies during checkout to process payments securely and prevent fraud. These cookies are set by the payment processor and are governed by its own cookie and privacy policies.
5. Local storage used by the Site
Some interactive features of the Site use your browser’s storage rather than cookies. This data stays on your device and is not sent to our servers.
| Item name | Type | Purpose | Duration |
|---|---|---|---|
ss_checklist_progress |
Local storage | Remembers which items you have ticked in interactive checklists within our blog articles, so your progress is still there when you come back. | Until you clear your browser storage or reset the checklist |
wc_fragments_*, wc_cart_hash_* |
Session storage (WooCommerce) | Speeds up display of the cart on pages where the cart summary is shown. | Until you close the browser tab |
Our free security self-assessment calculates your results within your browser. Your answers are not stored on our servers unless you choose to submit them to us through our contact form.
6. How to manage your cookie consent
When you first visit the Site, a cookie banner powered by CookieYes asks you to choose which optional categories of cookies you allow. You can:
- Accept all optional cookies;
- Reject all optional cookies, in which case only strictly necessary cookies and storage are used; or
- Customize your choice category by category.
Rejecting optional cookies is as easy as accepting them, and declining will not affect your ability to read our content, use the self-assessment or buy a program.
You can change or withdraw your consent at any time by clicking Cookie Settings (this link also appears in the footer of every page). This reopens the consent banner so that you can update your preferences. Withdrawing consent stops new optional cookies from being set; to remove cookies that were already set, you can also delete them in your browser settings. We will ask you to confirm your choices again after 12 months, or sooner if we make significant changes to the cookies we use.
7. Browser controls
Most web browsers let you view, block and delete cookies and site data through their settings. The location of these settings varies by browser, but they are usually found under “Settings,” “Privacy” or “Security.” Through your browser you can typically:
- see which cookies are stored and delete them individually or all at once;
- block third-party cookies;
- block all cookies from specific sites;
- clear cookies and site data, including local storage, when you close the browser; and
- browse in a private or incognito window, which discards cookies at the end of the session.
If you block all cookies, including strictly necessary ones, some parts of the Site, such as logging in, the cart and checkout, will not work. Clearing your site data will also reset any article checklist progress saved in local storage, and you will be asked to make your cookie choices again.
For analytics specifically, you can also use opt-out tools offered by analytics providers, where available.
8. Global Privacy Control (GPC)
Global Privacy Control is a signal that your browser or a browser extension can send to tell websites that you do not want your personal information sold or shared, or used for targeted advertising. When our Site detects a GPC signal, we treat it as a request to opt out, and our consent tool will not load optional analytics or marketing cookies for that browser unless you separately and expressly choose to enable them. More information about how we handle GPC is in our Privacy Policy.
The Site does not respond to “Do Not Track” signals, because there is no agreed standard for how websites should interpret them. We do honor GPC as described above.
9. Changes to this Cookie Policy
We may update this Cookie Policy from time to time, for example when we add or remove a feature, change a service provider, or when software updates change the cookies that a tool sets. When we make changes, we will update the “Last updated” date at the top of this page. If we begin using a new category of optional cookies, we will ask for your consent again before setting them.
10. Contact us
If you have questions about our use of cookies or similar technologies, please contact us:
- Email: [email protected]
- Location: SecuritySage, Lakewood, Ohio 44107, USA
- Online: Contact us