Skip to Main Content
TTXLab logo iconTTXLab
  • About
  • How It Works
  • Exercises
  • CISA Library
  • Reports
  • Plans
  • Try Demo
  • Trust
  • Contact
Try Live Demo
  • About
  • How It Works
  • Exercises
  • CISA Library
  • Reports
  • Plans
  • Try Demo
  • Trust
  • Contact
  • Sign In
  • Try Live Demo
Sign InTry Live Demo

Cookie Policy

This policy explains what cookies and similar browser storage technologies are used by TTXLab, why we use them, and how you can manage your preferences.

Last updated April 25, 2026 · Reviewed by TTXLab Security & Product Team

What are cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, remember your preferences, and provide analytics information. TTXLab also uses browser localStorage, which is a similar technology that stores data locally in your browser.

Cookie categories

We categorise cookies into the following types:

  • Essential: Required for the Service to function. These handle authentication, session management, security, and user preferences like theme selection. Essential cookies cannot be disabled without breaking core functionality.
  • Analytics: Used to understand how visitors use our website and to improve product quality and reliability. Analytics cookies are only set after you explicitly consent through our cookie consent banner. This includes first-touch attribution storage for UTM/referrer reporting. If you decline, no analytics cookies are placed, first-touch attribution is removed, and no analytics tracking occurs.
  • Marketing: TTXLab does not currently use marketing or advertising cookies. If this changes, we will update this policy and request your consent before setting any marketing cookies.

Cookie table

The following table lists the cookies and browser storage keys used by TTXLab:

Cookie / Storage KeyPurposeDurationType
__convexAuthJWT_* (browser localStorage)Convex Auth session state used to keep signed-in members authenticated across reloads.Persistent (browser localStorage, rotates during session refresh)Essential
__convexAuthRefreshToken_* (browser localStorage)Convex Auth refresh token used to renew a signed-in session without asking you to sign in again.Persistent (browser localStorage)Essential
ttxlab-analytics-consentStores your analytics cookie consent choice (accepted/declined). Used to determine whether analytics should be initialised.Persistent (localStorage)Essential
ttxlab-themeStores your preferred color theme (light/dark/system). Prevents flash of incorrect theme on page load.Persistent (localStorage)Essential
ttxlab-first-touchStores first-touch attribution such as UTM parameters, landing path, referrer, and first-seen time. Only written after explicit analytics consent and used to understand which campaigns lead to requested resources or inquiries.Persistent (localStorage or sessionStorage fallback); removed when analytics is declined or site data is clearedAnalytics
ttxlab-ad-attributionStores paid-search click IDs and campaign parameters in sessionStorage long enough to pass them into secure checkout and verified purchase conversion reporting.Session storage; cleared when the browser session ends or site data is clearedAnalytics
ph_*PostHog analytics identifiers and session data. Used for product analytics, navigation patterns, and reliability monitoring. Only set after explicit consent.1 yearAnalytics
ph_phc_*_posthogPostHog session replay and feature flag state. Captures anonymised usage patterns to improve product quality. Only set after explicit consent.1 yearAnalytics
_gcl_*Google Ads conversion and attribution identifiers. Used to measure advertising campaign performance and purchase conversions. Cookie storage is only enabled after explicit consent.Up to 90 daysAnalytics
_gac_* / _ga_*Google tag analytics identifiers that may be used for Google Ads measurement and reporting. Cookie storage is only enabled after explicit consent.Up to 2 yearsAnalytics
__vercel_live_tokenVercel preview deployment authentication. Only present in preview/staging environments, not on production.SessionEssential
_vercel_jwtVercel deployment protection. Used to authenticate access to password-protected preview deployments.SessionEssential

How consent works

When you first visit TTXLab, a cookie consent banner appears asking whether you accept or decline analytics cookies. Your choice is stored in browser localStorage under the key ttxlab-analytics-consent. Essential cookies are always active regardless of your analytics choice.

If you accept analytics, first-touch attribution may be stored for campaign reporting, PostHog is initialised in your browser, and anonymised usage data begins collecting. If you decline, any first-touch attribution stored on that browser is removed, PostHog is never loaded, and no analytics cookies are set. Our analytics provider (PostHog) does not receive any data until you explicitly consent.

Google Ads runs in consent mode. If analytics is declined or not yet accepted, Google Ads storage remains denied and no Google Ads cookies are placed by TTXLab, but the Google tag may send limited cookieless measurement pings so ad conversion reporting can respect your consent choice.

How consent is remembered

Your analytics preference is stored in browser localStorage on the specific device and browser where you made the choice. This means:

  • Switching devices or browsers will cause the consent prompt to reappear.
  • Using private/incognito browsing will cause the prompt to reappear each session.
  • Clearing site data or localStorage will reset your preference.

Managing your preferences

You can change your cookie preferences at any time using any of the following methods:

  • Clear site data:Open your browser's settings, navigate to site data for ttxlab.com, and clear all stored data. The consent banner will reappear on your next visit, allowing you to make a new choice.
  • Browser developer tools:Open your browser's developer tools (usually F12), go to the Application or Storage tab, find localStorage for ttxlab.com, and delete the ttxlab-analytics-consent key. Refresh the page to see the consent banner again.
  • Browser cookie settings: Most browsers allow you to block or delete cookies through their privacy settings. Note that blocking essential cookies may prevent the Service from functioning correctly.

Third-party cookies

Analytics cookies from PostHog are the only third-party cookies that may be set on ttxlab.com, and only after explicit consent. Vercel deployment cookies are only present in preview/staging environments. We do not allow advertising networks or social media trackers to set cookies on our site.

Related policies

For broader information about how we handle personal data, see our Privacy Policy. For security and trust documentation, visit the Trust Center. For questions about cookies or privacy, contact support@ttxlab.com.

Trust and legal resources

AboutContactPrivacyCookiesAccessibilitySecurityTrustTermsDPA
TTXLab logoTTXLab logo for dark theme

AI-facilitated tabletop exercises.

Veteran-owned and operated.

© 2026 TTXLab

600 1st Ave Ste 330, PMB 533227, Seattle, WA 98104-2246

Product

  • How It Works
  • Exercises
  • Reports
  • Plans & Pricing

Use Cases

  • Ransomware TTX
  • Incident Response TTX
  • Workplace Violence Tabletop
  • Starter Kit

Resources

  • Changelog
  • Trust

Legal

  • Privacy
  • Terms
  • Cookies
  • Accessibility
  • Security
  • DPA

Company

  • About
  • Contact