Privacy

This notice covers the basecobalt.com website. It explains what we collect when you browse and when you contact us, and how to opt out.

When you browse

You stay anonymous. We use PostHog for product analytics: which pages are viewed, which links to early access are used, and how visitors arrived (the referring site and any utm_ campaign parameters in the link). PostHog stores a random identifier in your browser to connect those page views.

We also record session replays: how the page was scrolled and clicked, so we can see where the site is confusing. Everything typed into a form field is masked and never appears in a recording. We don’t use advertising cookies or fingerprinting, and we don’t try to identify anonymous visitors.

We also keep a small first-party record in your browser’s local storage: how you first arrived, and the paths of the pages you viewed here. It stays in your browser and is only sent to us if you submit a form.

Analytics and session replay are off automatically if your browser sends Global Privacy Control or Do Not Track.

Analytics in this browser: on. Opt out of analytics

When you contact us or request early access

We receive what you enter:

• Your work email and company.
• Your answers about your role, the findings you work with, the tools they come from, your remediation workflow and what you want BaseCobalt to do. All optional.
• Anything you write in a free-text field.

With the submission we include the browser attribution record described above (first referring site, campaign parameters, landing page, pages viewed on this site), the submission time, and a device class (mobile, tablet or desktop). Once you submit, the analytics history from this browser is linked to your email so we can see which pages were useful to you.

Form submissions are processed by Formspree and analytics by PostHog, which may process your IP address to derive an approximate country. We use this information to respond to you, to decide who to work with during early access, and to decide what to build. We don’t sell it.

What not to send

Please don’t put source code, credentials, exploit details or confidential vulnerability information into any form on this site. If you want us to run a real finding, we’ll agree on a secure way to share it.

Access and deletion

To see, correct or delete what we hold about you, email hello@basecobalt.com.