'%3e%3c/ellipse%3e%3cpath%20d='M20.5%2023.5%20L3.4%2045.6%20L23%2031.8%20Z'%20fill='%23B4EE3A'%20stroke='%23B4EE3A'%20stroke-width='3'%20stroke-linejoin='round'%20stroke-linecap='round'%3e%3c/path%3e%3cpath%20d='M47%2020.5%20Q42%2033%2030.5%2036.5'%20stroke='%23FFFFFF'%20stroke-opacity='0.35'%20stroke-width='2.4'%20fill='none'%20stroke-linecap='round'%3e%3c/path%3e%3ccircle%20cx='30.2'%20cy='20.2'%20r='4.4'%20fill='%23FFFFFF'%3e%3c/circle%3e%3ccircle%20cx='28.9'%20cy='20.4'%20r='2.15'%20fill='%23101116'%3e%3c/circle%3e%3ccircle%20cx='27.9'%20cy='19.1'%20r='0.85'%20fill='%23FFFFFF'%3e%3c/circle%3e%3c/svg%3e)
What this policy covers
Clause 1.1. This policy explains the cookies and similar browser storage used by Hackiwi B.V. across hackiwi.com, app.hackiwi.com and admin.hackiwi.com.
Clause 1.2. This public marketing site sets no cookies of its own. Cookies appear once you sign in to the product, and they are there to keep you signed in.
Clause 1.3. We use no analytics cookies, no advertising cookies and no third-party tracking, so there is no consent banner to dismiss - there is nothing to consent to beyond what is strictly necessary to run the service.
Local storage
| Key | Type | Purpose | Expires |
|---|---|---|---|
| hackiwi-theme | localStorage - not a cookie | Stores your light or dark theme preference. | Until you clear your browser storage |
Clause 3.1. This value never leaves your browser. It is not sent to our servers, and it holds nothing but the word "light" or "dark".
Clause 3.2. It is stored in localStorage rather than in a cookie precisely so that it is never transmitted with a request.
Third-party cookies
| Cookie | Set by | Purpose |
|---|---|---|
| __cf_bm | Cloudflare | Bot management. Strictly necessary for DDoS and abuse protection. |
| cf_clearance | Cloudflare | Records that a security challenge was passed. Strictly necessary. |
Clause 4.1. These are set by Cloudflare, not by Hackiwi, as part of the security layer that sits in front of our infrastructure. We do not control them and we do not read them.
Clause 4.2. Cloudflare is a Hackiwi sub-processor. See the sub-processor list.
What we do not use
- No analytics cookies. We run no Google Analytics, no product analytics SDK, and no session recording.
- No advertising cookies. We do not advertise to you and we do not build audiences.
- No third-party tracking. Nothing on our pages reports your visit to a social network or a data broker.
- No third-party fonts. Typefaces are served from our own domain, so loading a page does not disclose your IP address to a font CDN.
one exception
Our public pages show the star count of our GitHub repository, which means the browser makes one request to api.github.com. It sets no cookie, sends no identifier, and the page renders normally without it.
Your choices
Clause 6.1. Strictly necessary cookies cannot be disabled - the platform requires the session cookie to function. Blocking it means you cannot sign in.
Clause 6.2. You can clear cookies and local storage at any time in your browser settings. Clearing them signs you out and resets your theme preference; nothing else is lost.
Clause 6.3. Signing out deletes the session cookie immediately and invalidates the session on the server, so the token cannot be reused even if it were captured.
Clause 6.4. Browsing the public marketing site and the open training library requires no account, and sets no cookies at all.
Changes and contact
Clause 7.1. If we ever add a cookie that is not strictly necessary, we will update this page and ask for your consent before setting it. The date at the top shows when this page was last revised.
Clause 7.2. How the data behind these cookies is handled is described in the Privacy Policy.
Contact
- Legal entity
- Hackiwi B.V.
This document was prepared in good faith. Hackiwi recommends that customers seek independent legal advice regarding their own compliance obligations.