Operator: QSai LLC (CISO Marketplace)
Site / Platform: ratemysoc.com
Domains Covered: socmaturity.pages.dev, ratemysoc.com
Effective Date: 2026-11-14
Next Scheduled Review: 2027-11-14
Jurisdictions in Scope: EU, US, US-CA, global
1. [The Short Version](#1-the-short-version)
2. [Cookies and Other Storage](#2-cookies-and-other-storage)
3. [What We Set](#3-what-we-set)
4. [Categories and Consent](#4-categories-and-consent)
5. [How Consent Works Here](#5-how-consent-works-here)
6. [Changing or Withdrawing Consent](#6-changing-or-withdrawing-consent)
7. [Browser Controls and Global Signals](#7-browser-controls-and-global-signals)
8. [Third-Party Services](#8-third-party-services)
9. [Changes to This Policy](#9-changes-to-this-policy)
10. [Contact](#10-contact)
We use necessary storage to sign you in and remember your cart, and analytics only if you accept it.
There is no advertising, no ad network, and no third-party tracking pixel on ratemysoc.com. We do not build advertising profiles and we do not sell or share your data for behavioural advertising.
A cookie is a small file a site stores in your browser and sends back on later visits. Browsers also offer localStorage and sessionStorage, which hold data locally but are not transmitted automatically with each request.
This policy covers all of them, because from a privacy standpoint what matters is what is stored about you and why — not the storage mechanism. Most cookie policies quietly omit browser storage; ours does not.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
csm_consent | Cookie | Records your consent choice so we do not ask on every page | 180 days |
| Session token | localStorage | Keeps you signed in between pages | Until sign-out or cleared |
| Cached profile | localStorage | Your display name and account identifier, so pages render without a round-trip | Until sign-out or cleared |
| Cart contents | localStorage | Remembers what you added before checkout | Until cleared or purchased |
| Sign-in verifier and state | sessionStorage | Short-lived values that make the sign-in exchange secure | Deleted the moment sign-in completes |
These cannot be switched off without breaking sign-in, the cart, or our ability to remember that you declined analytics.
If you accept analytics, our analytics provider sets its own cookies on this domain to distinguish visits and sessions. They record pages viewed, referring site, approximate location derived from IP, and device or browser type.
If you do not accept, none of these are set and no analytics script loads at all. This is enforced in the page itself, not by a setting we promise to honour.
| Category | Used here | Consent required |
|---|---|---|
| Strictly necessary | Yes | No — required for the site to function |
| Analytics / performance | Yes | Yes |
| Functional / preference | No separate category — the preferences we store are covered above | — |
| Advertising / marketing | No | Not applicable |
| Social media / embedded trackers | No | Not applicable |
We do not list an advertising category because we do not have one. If that ever changes, this policy will be updated and consent obtained before any such storage is set.
On your first visit a banner offers Accept analytics or Necessary only. Your choice is recorded in csm_consent and applied immediately.
In the EEA and UK, analytics is opt-in: nothing analytical loads until you actively accept. Elsewhere the banner is shown for transparency and you may decline at any time.
We record what you consented to and when, so we can evidence it. Consent records are retained as described in our Privacy Policy.
If the banner fails to load, analytics does not load either. The site fails closed.
Clear the csm_consent cookie in your browser settings and reload the page. The banner will ask again, and your previous choice is discarded.
Withdrawing consent stops future analytics collection. It does not retroactively erase data already collected lawfully, though you may request erasure of that data under our Privacy Policy.
Every major browser lets you block or delete cookies, and clear local storage, from its privacy settings. Blocking necessary storage will prevent sign-in and the cart from working.
We honour Global Privacy Control (GPC) and Do Not Track (DNT) signals for analytics: where either is present, we treat it as a decision not to consent, regardless of the banner.
Storage set by a third party we have engaged as a processor is disclosed in Section 3 and named in our Privacy Policy, together with what it processes and why.
We do not permit third parties to set storage on ratemysoc.com for their own independent purposes.
Payment is handled on our payment processor's own pages, under their storage practices and privacy notice; we do not receive card details.
We review this policy at least annually — next review 2027-11-14 — and whenever we add, remove or change what we store.
Adding a category that requires consent will always mean asking again, not quietly extending an existing consent.
QSai LLC (CISO Marketplace)
Email: [email protected]
Full detail on what we collect, why, and your rights is in our Privacy Policy.
Document ID: CC-COOK-MASTER-001
Owner: Chief Compliance Officer
Classification: Public
Effective Date: 2026-11-14
Next Review: 2027-11-14