Cookies Policy

Version dated 15th June 2026

This Cookies Policy describes how and when Yes We Hack S.A.S., a simplified joint stock company incorporated in France having its seat at 14 rue Charles V, 75004 Paris, registered under number 814 037 214 (R.C.S. Paris) and its affiliates (hereafter “YesWeHack”, “we”, “us” or “our”) uses cookies and other technologies when you visit our storefront site available at https://www.yeswehack.com/ (hereafter the “Site”).

YesWeHack is committed to providing you with the best interactions and services while protecting your information and respecting your right to privacy. Depending on the purposes for which they are collected and, where applicable, subject to your consent, we use cookies in accordance with our Privacy Policy to ensure the proper functioning of our Site; to detect and prevent unusual behaviors and violations of our Terms of Use; to understand how you use and interact with our Site; to promote our products and services; and to analyze and improve our services and your experience on our Site.

WHAT ARE COOKIES AND WHO SETS THEM ON THE SITE?

Cookies are text files with a small set of data created by the server upon your connection and labeled with an ID unique to your terminal so the server may read this ID and know from the information already collected, how to specifically serve you. The purpose is to identify you and improve your web browsing experience.

When browsing our Site, cookies may come directly from YesWeHack (i.e., first-party cookies) or indirectly from our partners (i.e., third-party cookies).

YesWeHack uses technical cookies (necessary cookies) which are needed for using the Site and its main functionalities. These cookies are exempt from your consent and are always activated. YesWeHack may also use preferences cookies to personalize your experience on the Site. Such cookies can only be deposited with your prior consent unless they are set up to prevent visitors from being tracked.

Our partners may use cookies for performance measurements and analyses (i.e., pages visited, volume of visits, etc.) to improve the performance of the Site or targeting cookies to propose suitable advertisements on other sites. These cookies can only be deposited with your prior consent. If you reject these cookies, YesWeHack will not track how you navigate and interact with the Site, and no targeted advertisements will be suggested to you.

WHICH COOKIES ARE USED ON THE SITE?

You will find below a regularly updated list of first-party cookies and third-party cookies deposited on our Site, classified into four (4) categories: (i) necessary cookies (allowing the site to be fully functional and enable its basic features); (ii) functional cookies (enabling certain functionalities according to your preferences); (iii) analytics cookies (providing us with metrics to understand how you interact with our Site); and (iv) advertisement cookies (allowing us to create a user profiles to provide you with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns).

Necessary cookies:

Cookie: connect.sid

Purpose: YesWeHack uses this cookie for authentication and for secure log-in. It registers the log-in information.

Data retention period: two (2) hours

Cookie: PHPSESSID

Purpose: YesWeHack uses this native cookie to PHP applications. The cookie stores and identifies a user's unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.

Data retention period: Session

Cookie: ywh-language-preference

Purpose: YesWeHack sets this cookie to determine the user’s preferred language.

Data retention period: one (1) year

Cookie: Cookietest

Purpose: YesWeHack uses the cookietest cookie to determine whether the user's browser accepts cookies, essential for website functionality and user experience.

Data retention period: Session

Cookie: cookieyes-*

Purpose: CookieYes sets this cookie for consent solution management.

Data retention period: one (1) year

Cookie: __cf_bm

Purpose: Cloudflare sets this cookie to support Cloudflare Bot Management.

Data retention period: one (1) hour

Cookie: _cfuvid

Purpose: Cloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services

Data retention period: session

Cookie: rc::a

Purpose: Google recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks.

Data retention period: Never expires

Cookie: rc::c

Purpose: Google recaptcha service sets this cookie to identify bots to protect the website against malicious spam attacks.

Data retention period: Session

Functional cookies:

Cookie: dtSa

Purpose: Dynatrace sets this cookie. This is a session cookie used for saving the user action such as Click on Login across different pages.

Data retention period: Session

Cookie: lidc

Purpose: LinkedIn sets the lidc cookie to facilitate data center selection.

Data retention period: one (1) day

Cookie: li_gc

Purpose: Linkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.

Data retention period: six (6) months

Analytics cookies:

Cookie: rxVisitor

Purpose: Dynatrace sets this cookie. This cookie is used to store the visitor ID for the returning visitors.

Data retention period: session

Cookie: rxvt

Purpose: Dynatrace sets this cookie. This is a session cookie used to store two timestamps.

Data retention period: Session

Cookie: __hssrc

Purpose: HubSpot cookie sets this cookie to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.

Data retention period: session

Cookie: __hssc

Purpose: HubSpot sets this cookie to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (which increments with each pageview in a session), and session start timestamp.

Data retention period: one (1) hour

Cookie: __hstc

Purpose: Hubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

Data retention period: six (6) months

Cookie: hubspotutk

Purpose: HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.

Data retention period: six (6) months

Cookie: _ga_*

Purpose: Google Analytics sets this cookie to store and count page views.

Data retention period: one (1) year, one (1) month, four (4) days

Cookie: _ga

Purpose: Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.

Data retention period: one (1) year, one (1) month, four (4) days

Advertisement cookies:

Cookie: _gcl_au

Purpose: Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.

Data retention period: three (3) months

Cookie: IDE

Purpose: Google DoubleClick IDE cookies store information about how the user uses the website to present them with relevant ads according to the user profile.

Data retention period: one (1) year, twenty-four (24) days

Cookie: test_cookie

Purpose: doubleclick.net sets this cookie to determine if the user's browser supports cookies.

Data retention period: fifteen (15) minutes

Cookie: bcookie

Purpose: LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs.

Data retention period: one (1) year

MANAGING COOKIES

When arriving on the Site home page or at any time thereafter, you can accept or reject the storage of cookies or withdraw your consent at any time by clicking on “Change Cookie Preferences” on the footer of the Site and change your settings.

YesWeHack will record your proof of your consent or refusal for six (6) months, then you will be asked for your consent again.

To ensure a consistent user experience and to accurately measure the effectiveness of our communications, the Site configures cookies to be sent across all yeswehack.com subdomains. Consequently, cookies accepted by the visitor may also be transmitted to the apex yeswehack.com domain. However, although these cookies may be visible on the platform hosted on yeswehack.com, they are not used in connection with the platform or its users.

WHO OPERATES THIRD-PARTIES COOKIES?

Our partners identified below operate cookies on our Site (e.g. to display content from external providers such as YouTube content).

Third-party providers on the Site:

Provider: CookieYes Limited

Location: 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom

Data transfer mechanism (for data transfers outside the EU/EEA): N/A

Privacy policy: CookieYes Privacy Policy

Provider: Cloudflare Inc.

Location: 101 Townsend St., San Francisco, CA 94107, USA

Data transfer mechanism (for data transfers outside the EU/EEA): Privacy Framework Program

Privacy policy:Cloudflare Privacy Policy

Provider: Google Ireland Limited (for Google and Youtube Cookies)

Location: Gordon House, Barrow Street, Dublin 4, Ireland

Data transfer mechanism (for data transfers outside the EU/EEA): N/A

Privacy policy:Google Privacy Policy

Provider: LinkedIn Ireland Unlimited Company

Location: Wilton Place, Dublin 2 – Ireland – One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Data transfer mechanism (for data transfers outside the EU/EEA): N/A

Privacy policy: LinkedIn Privacy Policy

Provider: Dynatrace LLC

Location: 1601 Trapelo Road, #116, Waltham, MA 02451 USA

Data transfer mechanism (for data transfers outside the EU/EEA): Privacy Framework Program

Privacy policy:Dynatrace Privacy Notice and Supplemental Privacy Notice for Individuals Within the EU, Switzerland, UK, and Brazil

Provider: HubSpot Ireland Limited.

Location: 1 Sir John Rogerson's Quay, Dublin 2

Data transfer mechanism (for data transfers outside the EU/EEA): Some data may be transferred to HubSpot Inc. in accordance with the Privacy Framework Program

Privacy policy:HubSpot Privacy Policy

Some third-party data providers may use and store the cookies they set, and the personal data generated from these cookies for their own purposes. Such processing is subject to their data protection policy.

WHAT ARE YOUR RIGHTS?

Where applicable, you may exercise the following rights under the conditions provided for in the regulations:

  • The right of access, rectification and erasure of your data (Art. 15 to 17 of the GDPR);
  • The right to withdraw your consent (opt out) at any time (Art. 13-2(c) of the GDPR);
  • The right to restriction of Processing of your data (Art. 18 of the GDPR);
  • The right to object the Processing of your data (Art. 21 of the GDPR);
  • The right to data portability (Art. 20 of the GDPR);
  • The right to issue instructions allowing access to your data in the event of death (Art. 85 of the French Data Processing, Data Files and Individual Liberties Act n°78-17 of 6 January 1978, as amended).

You can exercise these rights by e-mail to our Data Protection Officer (see contact details hereafter), specifying the right you wish to exercise and attaching proof of your identity (if necessary) or a power of attorney if you are being represented.

You can lodge a complaint to the French Data Protection Authority (CNIL – Commission Nationale de l'Informatique et des Libertés): https://www.cnil.fr/fr/plaintes.

OUR DATA PROTECTION OFFICER

YesWeHack has appointed an external Data Protection Officer who is responsible for ensuring the compliance of our processing operations, keeping a record of the processing activities, and ensuring the exercise of your rights specified hereabove.

Contact details of the DPO (Data Protection Officer): privacy@yeswehack.com

UPDATING OF THIS COOKIES POLICY

This Cookies Policy may be updated periodically and without notice. Any changes will be effective immediately upon posting of the new policy at https://www.yeswehack.com/. However, we will deposit cookies in accordance with the Policy in effect at the time of the collection.