Hoshiro Labs Cookie & Tracking Notice

1. Purpose

This Notice explains how Hoshiro Labs and Hoshiro ARC use cookies, browser storage, device identifiers and similar technologies. It should be read with the Hoshiro Labs Privacy Policy.

2. What cookies and similar technologies are

Cookies are small data files stored by a browser. Similar technologies can include local storage, session storage, device or browser identifiers, pixels and server-side identifiers. Some are necessary for a website or account to function; others are used for analytics or optional measurement.

3. Categories we use

• Strictly necessary — Authentication, secure sessions, account routing, protection against cross-site request forgery where applicable, and other functions required to provide the service. Status: Required.
• ARC fair-use / anti-abuse — Anonymous identifiers and related server-side data used to enforce free-scan allowances, deduplicate requests, prevent abuse and protect scanner capacity. Status: Required for free scanning.
• Security — Cloudflare security and Turnstile or similar anti-bot technologies used to protect forms, scans and accounts. Status: Required where deployed.
• Analytics — Measurement of website visits, acquisition sources and product interactions, including Google Analytics where enabled. Status: Optional / consent-gated where required.
• Marketing — Advertising or cross-site marketing technologies, if introduced in the future. Status: Not required; consent/opt-out controls will apply where required.

4. Anonymous ARC scan identifier

ARC may place an anonymous browser identifier, such as the deployed ARC anonymous-scan identifier, to recognise that a browser has used its free-scan allowance and to reduce abuse. This identifier is not intended to identify you by name, but it may be treated as personal data under some privacy laws when combined with IP address or other technical information.

5. Cloudflare Turnstile and security

We may use Cloudflare Turnstile and related Cloudflare security services to protect the website and scanner against automated abuse. These services may process browser, network and device information in order to assess whether a request is legitimate.

6. Analytics

Where Google Analytics or another non-essential analytics tool is enabled, it may collect identifiers and usage information such as page views, referral source, approximate location and interaction events. Where law requires prior consent, non-essential analytics should not be activated until the user has made the required choice.

7. Your choices

You can control non-essential cookies through any consent controls made available on the website and through your browser settings. Blocking strictly necessary cookies may prevent login, account functions, free-scan controls or security features from operating correctly. Withdrawing consent does not affect processing that was lawful before withdrawal. Some browsers and privacy tools may also send recognised opt-out preference signals where applicable law requires a business to honour them.

8. Cookie duration

Some cookies are session cookies and expire when the browser session ends. Others persist for a limited period so the service can remember security, fair-use or analytics state. Hoshiro configures cookie duration to be no longer than reasonably required for the stated purpose.

9. Third-party technologies

Third-party technologies used by Hoshiro may set or read their own cookies or identifiers in accordance with their privacy terms. Relevant providers may include Cloudflare, Stripe, Google Analytics and Calendly where those services are enabled on the relevant page or feature.

10. Updates

We may update this Notice when technologies or legal requirements change. The effective date at the top identifies the current version.

11. Contact

Privacy questions: privacy@hoshirolabs.com. General support:support@hoshirolabs.com.