CYBERWARE COOKIE POLICY

I. ABOUT THIS COOKIE POLICY

This Cookie Policy explains how Cyberware Ltd ("Cyberware", "we", "us" or "our") uses cookies and similar technologies on the Cyberware website, what those technologies do, which of them require your permission, and how you can accept, reject or later change your choices.

This Cookie Policy applies to the Cyberware website and should be read together with our Privacy Policy, which explains more generally how Cyberware collects and processes personal data.

This Policy does not govern cookies used on websites operated independently by third parties merely because we link to those websites.

Where this website is available in multiple languages, the English version of this Cookie Policy is the authoritative version unless applicable law requires otherwise.

II. WHO WE ARE

The website is operated by:

Cyberware Ltd (formerly Bulhack Ltd), 16 Hadzhi Dimitar St., 2100 Elin Pelin, Sofia Region, Bulgaria. Company registration number (UIC): 206948918.

VAT number: BG206948918

Questions concerning cookies, consent choices or this Policy may be sent to:

[email protected]

General information about Cyberware's processing of personal data and the exercise of privacy rights is available in our Privacy Policy.

III. WHAT COOKIES AND SIMILAR TECHNOLOGIES ARE

A cookie is a small piece of data that a website or another service asks your browser to store.

A first-party cookie is stored for the website you are visiting.

A third-party cookie is associated with another provider whose service is used or embedded on the website.

Cookies may be:

• session cookies, which normally expire when the relevant browsing session ends; or
• persistent cookies, which remain until their stated expiry date, until they are replaced, or until you delete them.

Websites can also use technologies other than traditional cookies, including browser storage, pixels, embedded scripts, unique identifiers and similar mechanisms.

In this Policy, we refer to these technologies collectively as Trackers where the distinction is not important.

IV. THE RULE WE APPLY

Cyberware separates Trackers into three categories:

• Necessary
• Experience
• Measurement

Necessary technologies operate only where they are required to provide, secure or remember functionality that you have requested.

Experience and Measurement technologies are optional.

On your first visit, Experience and Measurement are disabled by default.

Cyberware does not treat silence, continued browsing, scrolling, inactivity or a preselected option as consent.

Optional services are activated only after you make an affirmative choice permitting the relevant category.

Rejecting optional Trackers does not prevent you from using the core website.

V. YOUR COOKIE CHOICES

When the cookie banner is shown, you can:

• Accept All — allow Necessary, Experience and Measurement technologies;
• Reject All — allow Necessary technologies only; or
• Manage Preferences — choose the optional categories individually.

Necessary technologies cannot be disabled through the Cyberware consent panel because they are required for the relevant website functionality or service.

Experience and Measurement are not preselected.

Your refusal does not prevent access to the ordinary website.

Some optional features may be unavailable where the service providing that feature has not been allowed. For example, an embedded social-media post or video may remain unavailable until Experience is enabled.

VI. HOW CYBERWARE BLOCKS OPTIONAL SERVICES

Cyberware's website is designed so that consent-gated third-party services are not requested merely because a page containing them has been opened.

Optional script-based integrations are initially rendered in an inactive state. Their external source is not requested until the corresponding consent category has been granted.

Where third-party content is embedded through an iframe or similar external resource, Cyberware does not render that external resource until the relevant category has been allowed.

Accordingly, rejecting Experience or Measurement prevents the corresponding third-party integration from being loaded by Cyberware on subsequent page loads.

A link that simply opens a third-party website does not itself load that third party's tracking technology into the Cyberware page. If you follow such a link, the destination website's own privacy and cookie rules apply.

VII. NECESSARY TECHNOLOGIES

Necessary technologies are used only where reasonably required to remember your privacy choice, protect or deliver the website, or complete functionality that you explicitly request.

1. Cyberware consent cookie

Name: cw_consent

Provider: Cyberware Ltd

Category: Necessary

Type: First-party cookie

Purpose: Remembers your cookie-consent decision so that Cyberware can apply your preferences on later pages and visits.

The cookie contains:

• a randomly generated consent identifier;
• the applicable consent-policy version; and
• the categories you have allowed.

The identifier is generated in your browser. Cyberware does not intentionally place your name, email address, IP address or a device fingerprint inside this cookie.

Maximum lifetime: 180 days.

Path: /

SameSite: Lax

Secure: enabled when the website is served over HTTPS.

Rejecting all optional categories still creates the cw_consent cookie. In that case, it records that only Necessary technologies are permitted.

If the cookie is deleted, cannot be read, or relates to an obsolete consent version, Cyberware treats you as having no current stored decision and requests your preferences again.

Related local storage: cw_consent_pending

If the record of your decision described in section XII cannot be delivered to Cyberware when you decide, for example because your connection drops, a copy of that record is kept in your browser's local storage under cw_consent_pending. It is sent on a later visit and deleted once Cyberware has received it. A copy older than 180 days is deleted on your next visit instead of being sent. It holds only the information in that record and is Necessary for the same reason as the cookie.

2. Cloudflare security and delivery technologies

Provider: Cloudflare, Inc.

Category: Necessary

Cyberware uses Cloudflare as part of the network, security and traffic-delivery infrastructure protecting this website.

Depending on the Cloudflare security features that are triggered or enabled for the website, Cloudflare may place technically necessary cookies or similar identifiers.

Potential Cloudflare cookies include:

Not every Cloudflare cookie in this table will necessarily appear during every visit.

A Cloudflare cookie is normally created only if the relevant Cloudflare functionality requires it.

Cyberware does not use Cloudflare security cookies for advertising.

3. Stripe payment technologies

Provider: Stripe Payments Europe, Limited and other Stripe group entities, as described in our Privacy Policy

Category: Necessary when you initiate payment

Stripe technology is not loaded throughout the general website solely because you visit Cyberware.

It is used when you reach the payment stage of a checkout that you have chosen to initiate.

Stripe uses technical storage for payment functionality, transaction security, authentication and fraud prevention.

Relevant storage may include:

The exact Stripe storage presented to you can depend on the payment method, authentication requirements, Stripe Link usage, fraud-prevention checks and other checkout functionality.

Cyberware classifies the Stripe technology necessary to complete and secure a payment you have chosen to initiate as Necessary.

Stripe's own services may provide additional optional functionality subject to Stripe's own privacy and cookie controls.

VIII. EXPERIENCE TECHNOLOGIES

Experience technologies enable optional third-party content and functionality.

They are disabled until you enable Experience.

Enabling Experience may cause your browser to connect directly to the relevant third-party provider. The provider can then receive technical information such as your IP address, browser information, referring page and interaction with the embedded content.

Where you are logged into an account with that provider, the provider may also be able to associate your interaction with that account in accordance with its own privacy practices.

1. Clutch and G2 ratings

Category: not a Tracker

Cyberware displays its Clutch and G2 ratings as images and text served from Cyberware's own website. No Clutch or G2 widget, script or other resource is embedded, so viewing them makes no request to Clutch or G2 and sets nothing in your browser.

2. X embedded content

Provider: X

Category: Experience

Cyberware may embed posts or other content supplied by X.

The X integration is not loaded until Experience is enabled, and then only on pages that show an X post.

After it is enabled, X may use cookies, local storage and similar technologies in connection with embedded content. X states that its embedded services can use such technologies for functionality, security, analytics, content personalisation and other purposes determined by X.

Cookies encountered can depend on the X functionality used, whether you are logged into X, your location and your X privacy settings.

Examples of identifiers X documents for its services include personalization_id, syndication_guest_id and other X identifiers.

X states that cookie lifetimes may vary and that lifetimes are capped at 13 months in certain regions.

Cyberware does not load X embedded functionality where Experience has been rejected.

A separate share link which merely opens X after you click it does not cause the X embed to load beforehand.

For current details, consult X's Privacy Policy and cookie information.

3. LinkedIn embedded content

Provider for visitors in the EU, EEA and Switzerland: LinkedIn Ireland Unlimited Company

Category: Experience

Cyberware may embed LinkedIn content on particular website pages.

The LinkedIn iframe is not rendered until Experience is enabled.

Once LinkedIn content is allowed, LinkedIn may place or access cookies associated with its third-party embedded services.

LinkedIn's current published table for technologies it may use on third-party websites includes:

Not every item above is necessarily created by the particular Cyberware embed during every visit.

LinkedIn controls which of its technologies are used after its content is activated.

A separate LinkedIn share link that opens LinkedIn only after you click it does not load the embedded LinkedIn content beforehand.

For current information and LinkedIn's own privacy controls, consult the LinkedIn Privacy Policy and LinkedIn Cookie Policy.

4. YouTube embedded content

Provider for visitors in the EU, EEA and Switzerland: Google Ireland Limited

Category: Experience

Cyberware may embed YouTube videos on particular website pages.

The YouTube player is not rendered until Experience is enabled. Cyberware embeds it in YouTube's privacy-enhanced mode, served from youtube-nocookie.com.

Google states that privacy-enhanced mode prevents views of an embedded video from influencing your browsing experience on YouTube, and that any advertising shown in the embedded player is not personalised.

Privacy-enhanced mode does not mean that no Trackers are used. Once the player is allowed, and in particular once you play a video, YouTube may use cookies, local storage and similar technologies for functionality, security, analytics and other purposes determined by Google.

Examples of identifiers Google documents for YouTube include YSC, which lasts for the browsing session, PREF, which expires 8 months after its last use, __Secure-YNID, which lasts 6 months, and VISITOR_INFO1_LIVE.

Cyberware does not load the YouTube player where Experience has been rejected.

A link to Cyberware's YouTube channel that opens YouTube only after you click it does not load the embedded player beforehand.

For current details, consult the Google Privacy Policy and Google's information on how it uses cookies.

IX. MEASUREMENT TECHNOLOGIES

Measurement technologies help Cyberware understand aggregated website use and improve website performance and content.

They are disabled until you enable Measurement.

Google Analytics 4

Provider: Google

Category: Measurement

Cyberware uses Google Analytics 4 on its production website to understand matters such as:

• pages visited;
• sessions and navigation;
• general website usage;
• technical browser/device information; and
• aggregated traffic patterns.

Cyberware does not load the Google Analytics tag before Measurement consent is given.

If Measurement is rejected, Cyberware's implementation does not intentionally activate Google Analytics merely because you continue browsing the website.

When enabled, the principal Google Analytics cookies used by the standard Google tag are:

On Cyberware's current Google Analytics deployment, the property-specific _ga_ cookie reflects Cyberware's Analytics measurement identifier.

Google states that IP addresses are used during collection for functions such as deriving location information and are not logged or stored as IP addresses in Google Analytics.

Google controls its own downstream systems and may update the technical operation of Google Analytics.

Further information is available in Google's Privacy Policy, Google Analytics privacy documentation and Google's Analytics Opt-out Browser Add-on.

X. WHY NECESSARY TECHNOLOGIES DO NOT REQUIRE THE OPTIONAL CONSENT SWITCH

Under applicable European cookie rules, storing information on or accessing information from a user's device normally requires prior consent.

An exception applies where the technical storage or access is:

• required solely to transmit a communication; or
• strictly necessary to provide an information-society service explicitly requested by the user.

Cyberware relies on that limited exception only for technologies genuinely required for functions such as:

• remembering the cookie choice you asked the website to apply;
• protecting and delivering the website through necessary network-security technology; and
• providing and securing a payment process that you have deliberately initiated.

Analytics, social-media embeds and video embeds are not treated as Necessary.

XI. LEGAL BASIS FOR OPTIONAL TRACKERS

The act of storing information on or accessing information from your device through optional Experience and Measurement technologies is based on your prior consent where such consent is required under applicable electronic-communications and privacy law.

Where information obtained through such optional technologies constitutes personal data, Cyberware relies on your consent under Article 6(1)(a) GDPR for Cyberware's consent-dependent processing unless another basis is specifically identified in the Privacy Policy.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Necessary technologies may involve personal-data processing on another applicable legal basis, including Cyberware's legitimate interests in website and transaction security or processing necessary to provide a service requested by you. Further information is provided in the Privacy Policy.

XII. HOW YOUR CONSENT DECISION IS RECORDED

Your current preference is stored in the cw_consent cookie in your browser.

Each decision is also reported to Cyberware's internal Google Workspace channel, named as a recipient in our Privacy Policy, so that Cyberware can maintain evidence and visibility of consent choices.

The consent record may contain:

• the randomly generated consent identifier;
• whether you accepted, rejected, customised or withdrew consent;
• the categories you chose;
• whether your browser was sending a Global Privacy Control signal;
• the versions of the consent notice, this Cookie Policy and the Privacy Policy that were shown to you;
• the language of the website;
• the relevant page path; and
• the time of the decision and the time Cyberware received the record.

If the record cannot be delivered when you decide, it is kept in your browser as described in section VII and sent on a later visit.

The consent-decision record does not include your IP address or a device fingerprint, and is not intended to identify you independently of the consent identifier. Our ordinary server log records the IP address of every request to the website, including the request that carries your decision, as our Privacy Policy describes; that log entry does not carry your consent identifier or the decision itself.

The consent identifier is the mechanism that can associate the server-side consent record with the consent cookie held in your browser.

Cyberware normally retains evidence of a consent decision for up to five years from the relevant consent decision or withdrawal, as described in our Privacy Policy, unless a different period is required in connection with a legal obligation, complaint or claim.

XIII. CHANGING OR WITHDRAWING YOUR CHOICE

You can change your cookie choices at any time.

A Cookie Preferences control is available in the footer of the website.

Opening Cookie Preferences allows you to review and update your current choices.

You may:

• enable an optional category;
• disable an optional category;
• reject all optional categories; or
• later grant categories you previously rejected.

Changing your choice updates the cw_consent cookie.

After you withdraw consent, the relevant service will not be intentionally loaded on subsequent page loads.

When you withdraw a category, Cyberware switches off the services in it, deletes the cookies they set on this website's own domain and reloads the page, so that code already running stops. Other tabs of this website open in the same browser are informed and reload as well.

Cookies that third parties set on their own domains, such as those of X, LinkedIn or YouTube, are outside Cyberware's reach. You can delete them through your browser settings.

You may also delete cw_consent through your browser settings. Doing so does not activate any optional category. It causes Cyberware to treat you as having no recorded choice and request your preferences again.

Withdrawal is as free as giving consent.

XIV. BROWSER CONTROLS

You may independently use your browser to inspect, delete or block cookies and other website data.

Depending on the browser, you may be able to:

• view cookies stored for a website;
• delete individual cookies;
• delete all website data;
• block third-party cookies;
• block particular websites from using cookies; or
• configure additional privacy protections.

Browser-level blocking may affect website functionality.

Deleting Cyberware's consent cookie means the website will no longer be able to remember the choice previously stored in that browser.

Browser controls are separate from Cyberware's Cookie Preferences control and may not provide the same purpose-by-purpose choices.

XV. GLOBAL PRIVACY CONTROL AND DO NOT TRACK

Global Privacy Control

Global Privacy Control ("GPC") is a browser-based privacy preference signal recognised for certain opt-out rights under some United States privacy laws.

GPC can never give consent. Experience and Measurement are only activated after your affirmative choice in the cookie banner.

If your browser sends GPC, Cyberware keeps Experience and Measurement switched off for as long as the signal is present, wherever you are, even if you allow them in the cookie banner. The banner tells you when this applies, and the switches for those categories cannot be turned on while the signal is present.

Your choice in the banner is still stored and recorded, together with the fact that GPC was present, and applies if you later turn GPC off.

Cyberware does not intentionally operate advertising or cross-context behavioural-advertising trackers through the website.

Do Not Track

"Do Not Track" ("DNT") is a separate browser signal for which there is no single generally applicable technical or legal standard governing all website processing.

Cyberware therefore uses its Cookie Preferences mechanism to obtain and apply granular consent choices rather than treating DNT as permission to activate optional technologies.

XVI. SALE, SHARING AND TARGETED ADVERTISING

Cyberware does not use cookies for the purpose of selling personal information for money.

Cyberware does not intentionally operate advertising trackers or use website Trackers to build profiles for cross-context behavioural advertising.

Optional embedded services such as social-media content may process information for purposes determined independently by those providers after you choose to load them.

Because some U.S. privacy laws define "sale", "sharing" and "targeted advertising" broadly, Cyberware's Privacy Policy sets out the rights available to qualifying residents and how to exercise them.

Where applicable law requires an opt-out signal or other privacy choice to be recognised, Cyberware will apply it in accordance with that law.

XVII. INTERNATIONAL PROCESSING

Some third-party providers used by Cyberware operate internationally.

The Necessary providers described in section VII, and the internal communication systems that receive website submissions, already operate internationally, so some processing takes place outside Bulgaria and outside the European Economic Area whatever you choose. Allowing optional content adds the providers named in sections VIII and IX to that list.

The relevant provider may use infrastructure in the United States or other countries.

Where personal data subject to the GDPR is transferred outside the EEA, Cyberware relies on an applicable transfer mechanism such as:

• an adequacy decision;
• participation in an applicable recognised data-transfer framework;
• European Commission Standard Contractual Clauses; or
• another mechanism permitted by Chapter V GDPR.

Further information about Cyberware's international transfers and the safeguards applicable to individual providers is available in the Privacy Policy.

XVIII. THIRD-PARTY CONTROL OF TRACKERS

Third-party services control their own technology after Cyberware has been permitted to load that service.

As a result, third-party providers can change:

• cookie names;
• technical storage mechanisms;
• cookie contents;
• domains;
• expiry periods; and
• service functionality.

Cyberware reviews its published tracker information periodically and updates this Policy when a material change to the website's use of Trackers occurs.

Where the third party changes a technical detail independently without changing the purpose for which Cyberware activates the service, its current provider documentation should be consulted for the most current technical details.

If Cyberware introduces a new optional purpose or provider requiring additional consent, the consent version will be changed and affected users will be asked to make a new choice before that technology is activated.

XIX. COOKIE INVENTORY SUMMARY

The website's current categories are summarised below.

Cyberware currently has no Advertising category because it does not intentionally deploy advertising or remarketing tags through this website.

XX. CHANGES TO THIS COOKIE POLICY

Cyberware may update this Cookie Policy where:

• the website's cookie inventory changes;
• a provider is added, removed or materially changed;
• the purposes for which a technology is used change;
• a legal or regulatory requirement changes; or
• the consent mechanism itself changes.

The date at the top of this Policy identifies the latest revision.

Where an update materially changes what Cyberware asks you to allow, Cyberware will update the consent version and request a new decision before the newly consent-dependent technology is activated.

XXI. RELATIONSHIP WITH THE PRIVACY POLICY

This Cookie Policy explains storage and access technologies used by the website.

Cyberware's Privacy Policy separately explains matters including:

• the categories of personal data Cyberware processes;
• purposes and GDPR legal bases;
• recipients;
• retention periods;
• international transfers;
• data-subject rights;
• security;
• complaints; and
• contact details.

Where the use of a Tracker results in processing of personal data, both policies should be read together.

XXII. CONTACT

Questions about this Cookie Policy, a Tracker used by Cyberware, or a consent decision associated with your consent identifier may be sent to:

Cyberware Ltd (formerly Bulhack Ltd)

16 Hadzhi Dimitar St.

2100 Elin Pelin, Sofia Region, Bulgaria

European Union

Privacy and cookie enquiries: [email protected]

General privacy rights and instructions for exercising them are set out in Cyberware's Privacy Policy.