# Cookie Notice — Hexes Security

> The cookies and similar technologies Hexes Security, Inc. uses on its websites, why, and how to control them.

- Canonical: https://hexessecurity.com/legal/cookie-notice
- Last updated: 2026-11-13
- Site index for agents: https://hexessecurity.com/llms.txt

_Legal_

# Hexes Cookie Notice

Version 1.0 · Effective 2026-11-11 · Status: published

**Version 1.0 · Effective date: 2026-11-11**

This Cookie Notice explains how **Hexes Security, Inc.** uses cookies and similar technologies on hexessecurity.com and our other websites (the **"Sites"**). It supplements our Privacy Notice.

## 1. What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies include local storage, pixels and tags. Some are set by us (**first-party**) and some by our service providers (**third-party**). Some last only for your browsing session; others persist until they expire or you delete them.

## 2. What we use

Our Sites set no cookies of their own and use no third-party analytics, advertising or tracking. We measure visits with our own method, which stores nothing in your browser (see Privacy Notice §2.2). Cookies can be set only in these cases:

| Category | Purpose | Can you turn it off? |
| --- | --- | --- |
| **Strictly necessary: network protection** | Our content delivery and network security provider, which runs the network in front of our Sites, may set a cookie to protect them from automated abuse and attacks. | No; it protects the Sites and does not track you across other sites. |
| **Strictly necessary: sign-in** | When you sign in to the customer portal or a console we host, our identity and sign-in provider sets a session cookie that keeps you signed in. | No; sign-in needs it. |
| **Embedded video** | Nothing is loaded from the video provider until you press play on a video. The video is then served in the provider's reduced-cookie mode, and the provider may set cookies or use local storage under its own policy. | Yes: do not press play, or block third-party cookies in your browser. |

If we ever add analytics, functional or marketing cookies, we will update this notice first and, where the law requires it, ask for your consent before setting them.

## 3. Your choices

- **Consent.** We set no cookies that need consent, so our Sites show no cookie banner. If that changes, we will ask for consent where the law requires it (for example, in the EEA, UK and Switzerland) before setting such cookies.
- **Opt-out signals.** When your browser sends a Do Not Track or Global Privacy Control signal, our own visit measurement records nothing. We also honor Global Privacy Control as a request to opt out of the sale or sharing of personal data and targeted advertising, where those laws apply; we do neither.
- **Browser settings.** Most browsers let you block or delete cookies. If you block strictly necessary cookies, parts of the Sites may not work.

## 4. Our products

Hexes software that customers run in their own environments does not use advertising or analytics cookies. The Hexes console uses strictly necessary cookies for sign-in sessions and security (for example, protection against forged requests from other sites). Consoles that Hexes Security, Inc. hosts also use the sign-in cookie described in Section 2. Product call home is not a cookie; it is described in our Privacy Notice and Customer Agreement.

## 5. Changes and contact

We may update this notice; the version number and effective date show the latest change. Questions: legal@hexessecurity.com.

[All legal documents](https://hexessecurity.com/legal)

---

_About Hexes Security:_ Hexes Security builds commercial cloud-workload security for Kubernetes: inline zero-trust enforcement at layer 7 — network, process and file — from policy learned from each workload (Learning → Watching → Enforcing). It extends inline enforcement to eBPF, AI-agent and MCP traffic, and the software supply chain. Hexes is not open source, not a CSPM/CIEM, not a SIEM and not a CNI.