Cookie Policy

Last updated: 22 September 2026

This page explains how AttackSurfaceCheck uses cookies and similar technologies on this website.

What are cookies?

Cookies are small text files placed on your device by a website you visit. They are commonly used to make websites function, remember preferences, or track visitor behavior.

What we use

We do not run advertising pixels or sell visitor data. We use one analytics tool, described below, plus a small number of strictly necessary cookies.

Microsoft Clarity (analytics)

We use Microsoft Clarity to understand how visitors use this site: which pages get read, where people get stuck, and how the site can be improved. Clarity collects aggregated click, scroll, and session-replay data, and sets its own cookies (primarily _clck and _clsk) to link page views from the same visit together. Clarity is configured to mask sensitive form inputs by default. We do not link Clarity data to the personal information you submit through our forms.

Microsoft’s own documentation on what Clarity collects and how it’s processed is available in the Microsoft Clarity FAQ and Microsoft Privacy Statement.

Strictly necessary cookies

The underlying WordPress platform sets a small number of essential cookies. For example, a session cookie if you were to log in to a protected area (not applicable to regular visitors), and a security-related cookie used to help distinguish legitimate form submissions from automated abuse.

Managing cookies

You can block or delete cookies through your browser’s privacy or security settings at any time. Doing so may affect how analytics works for your visit, but not core site functionality. Microsoft also provides guidance on opting out of Clarity tracking in the FAQ linked above.

Changes

If we introduce further analytics or tracking tools in the future, we will update this page to describe exactly what is used and why.

Questions

If you have questions about this Cookie Policy, contact privacy@attacksurfacecheck.com. See also our Privacy Policy.

Get started

What does your organization look like from the outside?

Request an External Attack Surface Check and find out what an attacker can see before they do.