Privacy Policy
Last updated: 13 October 2026
This site (cilock.dev, the CI/lock documentation, operated by TestifySec, Inc.)
uses first-party analytics and a B2B visitor-identification service to understand how
the docs are used and which organizations are interested in CI/lock. This page explains
what we collect, why, and your choices.
This notice is provided for transparency and is not legal advice; it should be reviewed by counsel before being relied upon for compliance.
Consent
Wherever you are, none of the analytics, identification or advertising tags below runs, and we set none of their cookies, until you choose "Allow measurement" in the banner. Before you choose, and after "Necessary only", the only cookie we set is the one that remembers your choice. A browser that sends Global Privacy Control or Do Not Track is treated as "Necessary only", even after an earlier "Allow measurement".
Downloads, install.sh, the release manifest and the signed release files work the
same whether or not you consent. We count downloads in aggregate (version, platform,
country) without any cookie or visitor id.
To change your choice, clear this site's cookies and reload: the banner comes back.
If you withdraw consent, the next page you load expires cl_vid and cl_sid.
What we collect
First-party analytics (ours, no third party):
- A persistent visitor id (
cl_vid) and a short session id (cl_sid) so we can distinguish new vs returning readers and group page views into sessions. - Pages viewed, referring URL, on-site search queries, link clicks, copied code snippets, and engagement signals (time on page, scroll depth).
- Server-side request signals: IP address, approximate location (country/region/city), network operator / ASN, browser and device (user-agent, client hints), and a derived TLS fingerprint used for bot filtering.
- Journey events shared with TestifySec's other sites (testifysec.com, pushgate.dev):
page views and clicks on calls to action, docs and install links, tied to a random
journey id (
ts_jid) and the campaign that brought you, with no form values, search text or fingerprint. - Named interaction events (page view, install command copied, download or
install.shlink clicked, docs and outbound link opened, scroll depth, time on page, repeated clicks, script error type). Each carries only a category, such as the operating system, the install method or a page path, and never what you type, search for or copy.
Advertising (third party, Google Ads):
- The Google Ads tag loads only after "Allow measurement", for page views and remarketing reach.
B2B account identification (third party — Factors.ai):
- We use Factors.ai to estimate the company/organization a visit may originate from,
based on the network IP. This is account-level, not an attempt to identify you
personally. Factors sets a first-party cookie (
_fuid).
Infrastructure (processor — Cloudflare):
- Cloudflare delivers the site and provides bot/security signals at the edge.
Why we collect it
To measure documentation usage and improve content, and — for business visitors — to understand which organizations are evaluating CI/lock. We do not sell personal data, and we do not attempt to identify individuals or obtain personal email addresses.
Legal bases (GDPR/UK GDPR)
- Consent for the analytics cookies, journey events, advertising tag and Factors identification.
- Legitimate interest for aggregate, security, and bot-filtering processing.
Cookies
| Cookie | Purpose | Set when | Lifetime | Party |
|---|---|---|---|---|
ts_measurement | Remembers your choice (granted or denied); strictly necessary | You choose in the banner | 180 days | First-party |
cl_consent | Older copy of the same choice, kept for compatibility | You choose in the banner | 180 days | First-party |
cl_vid | Returning-visitor analytics | After "Allow measurement" | 2 years | First-party |
cl_sid | Session analytics | After "Allow measurement" | 30 minutes | First-party |
ts_jid | Cross-site journey id (also kept in local storage as ts_journey) | After "Allow measurement" | 90 days | First-party |
cl_camp | Campaign that first brought you here | After "Allow measurement" | 90 days | First-party |
_fuid | Factors.ai account identification | After "Allow measurement" | per Factors | First-party (Factors) |
Google Ads sets its own cookies only after "Allow measurement".
Sharing
Data is processed by Cloudflare (hosting/edge), Factors.ai (account identification) and Google (advertising) as our processors/providers. We do not sell personal information.
Your rights & contact
Depending on your region you may have rights to access, correct, delete, or object to processing of your personal data. To exercise them, contact [email protected].