Your information.
A clear explanation.

Updated October 6, 2026.

Optional visitor analytics

When you allow analytics cookies, our first-party analytics records visited page paths, dates and times, a broad referral source such as Google or LinkedIn, and random browser and visit identifiers. Identifiers are hashed before storage. We use these records to understand page popularity and repeat visits. We do not collect names, email addresses, form contents, readiness answers, precise location, or full query strings through this feature. We do not use session recordings or browser fingerprinting.

Our first-party visitor cookie lasts up to 90 days from your most recent counted visit. A visit cookie expires after 30 minutes of inactivity. Records older than 90 days are excluded from reports and deleted on the next collection or dashboard request. Only the authorized website owner can view these reports. Preview visits and signed-in staff visits are excluded.

Your cookie choice

Optional analytics remain off until you allow them. Your choice is stored in an essential preference cookie for up to 180 days. You can decline or withdraw consent here or in the footer. Withdrawing consent clears our analytics cookies and deletes the first-party records associated with the current browser identifier. We honor Global Privacy Control and Do Not Track signals by disabling optional analytics.

Google Analytics

If you allow analytics on the public website, we also load Google Analytics 4. We disable advertising personalization and Google signals in the site configuration, and send page locations without their query strings or fragments. Google processes analytics data under its own terms and retention settings. First-party deletion does not delete records already processed by Google. Read Google’s privacy policy.

Contact forms

When you choose to open a contact or assessment form, the site loads HubSpot to receive your inquiry. HubSpot may receive browser and network information needed to deliver the form. Information you submit is used to respond to your request. Do not include passwords, sensitive client records, or incident evidence in a website form. You can also contact us directly by phone or email. Read HubSpot’s privacy policy.

Readiness check and staff access

The readiness check calculates results in your browser. Progress is stored in this browser tab using session storage, allowing same-tab refresh and recovery for up to 24 hours after your last change. Expired progress is removed when you next open the check. Choose “Clear answers and start again” in the check to remove it immediately. If browser storage is unavailable, the check still works without recovery. Answers and score PDFs are not sent to Karhu or our visitor analytics. Staff sign-in uses ChatGPT authentication; approved account identifiers and contact details are used to manage editing permissions. Hosting and authentication providers process technical information to operate and secure their services. We use short-lived, hashed request keys to limit abuse.

Questions or requests

Contact info@karhucyber.com or (906) 212-4100 with questions about this website or your information.