Last updated: 23-September-2026 · Consent version 1.0
This page explains what cookies and similar storage technologies Vuln-X actually uses, why, and how you can change your preferences at any time. It reflects the real technical implementation of the platform — we do not list categories or third-party services that are not actually in use.
A cookie is a small piece of text a website stores in your browser. It can be read back on later visits (or later requests during the same visit) to remember something about you or your session — for example, that you are logged in. "Similar storage technologies" refers to related browser mechanisms such as localStorage, which work in a comparable way but are not sent to the server automatically.
Vuln-X uses cookies and local storage only for two purposes: (1) keeping you securely signed in so you can run scans and view your own reports, and (2) remembering a small number of optional interface choices if you allow it. We do not use cookies to build an advertising profile, sell data, or track you across other websites.
These are required for the platform to function and cannot be turned off, because doing so would break login, security, or the scanning workflow itself.
| Name | Purpose | Duration | Party |
|---|---|---|---|
auth_token | Keeps you signed in; identifies your account on every request. Set only after a successful login, HttpOnly (not readable by JavaScript) and SameSite=Lax. | 30 days, or until you log out | First-party |
PHPSESSID | PHP's built-in session cookie. Used to hold your CSRF protection token and short-lived page state while you are on the site. | Browser session | First-party |
vulnx_consent | Stores your cookie-preference choices themselves (this cookie), so we know not to ask again and can honor your decision. | 180 days | First-party |
If you enable the "Preferences" category, Vuln-X remembers one thing on your device: whether you collapsed the dashboard sidebar, so it stays collapsed the next time you visit. This is stored in localStorage under the key vulnx_pref_sidebar_collapsed, never sent to our server, and is deleted automatically the moment you turn this category off.
Vuln-X does not currently use any analytics or usage-tracking technology (for example, no Google Analytics, no custom event tracking). The Analytics option appears in the cookie preference panel for transparency, but it has nothing to activate and cannot presently be toggled. If this changes in the future, this policy and the consent version will be updated first, and you will be asked for consent again.
Vuln-X does not use marketing, advertising, or third-party tracking cookies of any kind. The Marketing option appears in the preference panel for transparency only and has nothing to activate.
You can change your choice at any time, without clearing your browser or creating an account:
Your choice is saved in the vulnx_consent cookie described above, as a small record containing only: the consent version, which categories you allowed, and the date you made the choice. It never contains your name, email, password, payment details, or scan data.
For privacy or cookie questions, contact mh4630656@gmail.com or see the full Privacy Policy.