Cookie Policy
Last updated: 29 September 2026
Summary
This website does not set any analytics, advertising, or tracking cookies. Neither does our product Demo on demo.double-a-sec.com. Everything either of them keeps in your browser is listed on this page, and nothing is stored until you do something: switch the theme, close the cookie notice, or change something in the Demo.
- This website sets no cookies of its own. It keeps two small preferences in your browser’s local storage, only after you set them.
- The Demo keeps the changes you make in one cookie in your browser, plus two small preferences in local storage. Nothing you enter is written to a database on our side.
- Cloudflare, which serves both sites, may set strictly necessary security cookies when we switch on its protections.
- Separately, and without cookies, we count clicks on links to the Demo and Pitch Deck downloads as anonymous daily totals; see Cookie-less aggregate measurement.
All of this is strictly necessary for a service you asked for, or a preference you set yourself, so we do not ask for consent and there is nothing to opt in to or out of. You can delete any of it in your browser at any time; see Your choices.
What this page covers
Cookies and browser storage such as local storage are treated the same way by law: both store information on your device. This page therefore lists both, in two tables, one for this website and one for the Demo, and states for each entry what it is for, when it is created, how long it stays, and what happens if you delete it. This page is not a legal determination; it describes what our sites do today, and we update it when that changes.
This website (double-a-sec.com)
Our own code on this website sets no cookies. It keeps two values in your browser’s local storage, and only after you act:
| Name | Type | Purpose | Created when | Kept for | If you delete it |
|---|---|---|---|---|---|
| theme | Local storage | Remembers your light or dark theme choice. | You press the theme switch in the header. | Until you clear it. Local storage has no expiry date. | The site follows your system theme again. |
| cookies-ok | Local storage | Remembers that you closed the cookie notice. | You press OK on the cookie notice. | Until you clear it. | The cookie notice is shown again. |
The stored values are the words “light” or “dark” and the digit “1”. They contain no identifier, they never leave your device, and they are not sent to us or to anyone else. The cookie notice appears on the home, pricing, MCP and documentation pages. Pressing OK only closes it; it switches nothing on or off.
The Demo (demo.double-a-sec.com)
Our product Demo works without an account. So that it can show you your own changes, it keeps them in your browser, in one cookie, and it keeps two preferences in local storage:
| Name | Type | Purpose | Created when | Kept for | If you delete it |
|---|---|---|---|---|---|
| cra_demo | Cookie | Keeps the changes you made in the Demo, so the Demo shows them on your next request. | You make your first change in the Demo. Looking around sets nothing. | 7 days after your last change in the Demo | The Demo shows its original sample data again. |
| axa-theme | Local storage | Remembers your light or dark theme choice in the Demo. | You press the theme switch in the Demo. | Until you clear it. | The Demo follows your system theme again. |
| demo-cookie-notice | Local storage | Remembers that you closed the Demo’s cookie notice. | You press OK on the notice in the Demo. | Until you clear it. | The notice is shown again. |
What is in the Demo cookie
- A compact list of the changes you made: which action you took and the data you entered, such as a product name or a decision. For an uploaded file it keeps only the file name, size and checksum, never the file’s content.
- It is signed, so it cannot be altered without the Demo noticing. It is not encrypted: whatever you type in the Demo is in this cookie, in your browser. The Demo is made for its sample data; please do not enter real personal data.
- It holds at most about 3.5 KB or 60 changes. Beyond that the Demo refuses further changes until the cookie expires or you delete it.
Where the Demo cookie goes
- It is sent only to demo.double-a-sec.com, and only with the Demo’s own data requests, never with page loads. It is not sent to this website or to any third party, and scripts in the page cannot read it.
- On each request the Demo server rebuilds your state from the cookie, answers, and keeps a copy only in working memory for a short time. Your changes are never written to disk, a database or external storage on our side. Restarting the Demo forgets that memory; your changes stay in your cookie.
- There is no reset button. To start over, delete the cookie in your browser, or wait for it to expire.
How the Demo counts its use in aggregate, without anything from your browser, is described in our Privacy Policy.
Cookies Cloudflare may set
Cloudflare serves both sites and protects them from malicious traffic. Depending on which protections we have switched on, Cloudflare may set the strictly necessary cookies below. They are set by Cloudflare, not by our code, and we list them here so that this page stays accurate the moment a protection is enabled:
| Cookie | Set when | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare bot protection is enabled. | Bot management: distinguishes humans from automated traffic. Not shared across sites. | 30 minutes after your last request |
| _cfuvid | A Cloudflare rate-limiting rule that tells visitors apart is enabled. | Rate limiting: distinguishes individual visitors sharing one IP address. | Browser session |
| cf_clearance | Cloudflare shows you a security challenge and you pass it. | Remembers that you passed the challenge, so it is not repeated on every page. | As configured for the challenge in our Cloudflare account |
| CF_Authorization and related Cloudflare Access cookies | A member of our team signs in to the admin area of this website. | Access control for our staff only. Visitors never receive these cookies. | Up to 24 hours by default |
These cookies are strictly necessary to deliver the sites securely. They do not identify you personally and are not used for tracking or advertising. Cloudflare may process them in data centres outside the EU; see our Privacy Policy and Cloudflare’s cookie documentation for details.
Cookie-less aggregate measurement
We measure interest in two things only, and neither uses cookies or browser storage:
- Demo link activations — when you activate a link to demo.double-a-sec.com, a script on this website sends us a small request naming only the page and the position of that link (for example “pricing page, plan card”).
- Pitch Deck downloads — when our server starts serving a Pitch Deck, it counts the deck type and language. Your browser sends nothing extra for this.
Each of these only increases a daily total. No identifier is created, and nothing is stored in your browser for it. Like every request, the one that reports a Demo click carries the usual technical data such as your IP address; how that data is handled is described in our Privacy Policy. The theme, cookies-ok and Demo values above play no part in this measurement.
What we do not do
- No analytics, advertising or tracking cookies, on either site.
- No third-party scripts, fonts, pixels, embedded videos or social-media widgets.
- No visitor, session or device identifier, no fingerprinting, no cross-site tracking.
- Links to other websites do nothing until you click them. Links to the Demo carry no parameters.
Legal basis
Storing information on your device, and reading it back, requires your consent unless it is strictly necessary to provide a service you have explicitly asked for (Article 5(3) of the ePrivacy Directive 2002/58/EC; in Austria, § 165(3) of the Telecommunications Act 2021). Every entry on this page falls under that exception: a preference you set yourself, a record that you closed a notice, the state of the Demo you are using, or a security cookie needed to serve the site. That is why our cookie notices inform you rather than ask you. The processing of any personal data on our servers, such as IP addresses in Cloudflare’s logs, is covered by our Privacy Policy.
Your choices
Because we only use strictly necessary cookies and storage, there is nothing to opt out of that would not break the service itself. You can still delete or block cookies and local storage at any time through your browser settings, for this website and for the Demo separately. The consequences are those in the tables above: the theme falls back to your system setting, a notice is shown again, the Demo returns to its sample data, and Cloudflare’s protection may ask you to verify more often. If you block JavaScript, links to the Demo keep working and no click is counted.
Changes to this policy
We update this page whenever what our sites keep in your browser changes, and we update the date at the top.
- 29 September 2026 — added the Demo’s local storage values, described Cloudflare cookies as depending on the protections enabled, and stated when each value is created.
- 23 September 2026 — added the Demo cookie and the cookie-less aggregate measurement.
Contact
Questions about this policy: contact@double-a-sec.com