Cookie and Tracking Policy

Last updated: 14 October 2026

‍

This policy explains the technologies we use to collect information on spectrum.security, what each one stores on your device, and what data each provider receives. It supplements our Privacy Notice, which describes your rights and how to exercise them.

‍

We have called this a Cookie and Tracking Policy deliberately: not every technology below is a cookie, and a policy that discussed only cookies would not cover them.

1. The technologies we use

Cookies are small files a website stores on your device. First-party cookies are set by us or by a provider under our domain; third-party cookies are set by another domain.

‍

Pixels and tags are small scripts or images used to record that a page was viewed and to measure advertising.

‍

Visitor identification services use your IP address to identify the organisation you are visiting from. See Section 4.

2. Your choices

With the exception of what is strictly necessary to operate and secure the site, nothing below runs until you consent. Our consent management platform (Usercentrics) holds every provider listed here — including Google Tag Manager and everything it loads — inert until you make a choice.

‍

You can change or withdraw your consent at any time through the consent settings link on our site.

‍

Two limits, stated plainly:

‍

• Withdrawal is not retroactive. It stops future processing. A script already running in the page you are on continues until you reload, and anything it has already stored stays until it expires or you clear it.
• Grouped consent. The providers loaded through Google Tag Manager are currently a single choice rather than one per provider. Accepting them accepts all of them; rejecting them rejects all of them, including analytics.

‍

You can also clear cookies and other stored identifiers yourself at any time through your browser's site-data controls.

3. Providers loaded directly by our site

4. Company identification

Most website analytics tells us that a visit happened. One of our providers goes further and tells us which organisation visited.

‍

Company-level identification. Apollo uses your IP address to identify the organisation you are visiting from, together with details such as its industry, size and location. We use this to decide whether and how our sales team follows up.

‍

This identifies the organisation, not you personally. We do not use services that resolve anonymous visits to named individuals.

‍

This runs only with your consent, and you can withdraw that consent at any time. You can also object to this processing, ask what we hold about you, or ask us to delete it. If you are in the EEA or the UK, the quickest route is the request portal operated by our representative, Euverify ↗. Requests submitted there are logged and tracked, and we are notified immediately. You can also contact us directly at legal@spectrum.security. Section 8 of the Privacy Notice explains every route.

5. Providers loaded through Google Tag Manager

Accepting Google Tag Manager currently accepts all of them.

‍

Apollo states that it sells and shares certain personal information for its own purposes. See Section 9 of the Privacy Notice.

‍

This provider stores nothing on your device and does not track you across sites. We ask for consent for it anyway.

6. How long data is kept

Retention by each provider is governed by that provider's own policies, and most do not publish a fixed period. Where we cannot give a fixed period, we keep data only as long as it serves the purpose it was collected for — judged by how recently you visited, whether you have withdrawn consent, and any legal reason to keep a record. Where a period is published or observable:

‍

You can remove anything stored on your device at any time through your browser's site-data controls.

7. Changes

We will update this policy when the providers on our site change, and revise the "Last updated" date above.

‍

Privacy requests. If you are in the European Economic Area or the United Kingdom, the quickest route is the request portal operated by our representative, Euverify ↗. Requests submitted there are logged and tracked, and we are notified immediately. Anyone can also contact us directly at legal@spectrum.security. Section 8 of the Privacy Notice explains every route.

‍

Other questions: legal@spectrum.security

‍