Skip to content
← DefenseScore
Legal

Cookie Policy

v1.0 — Effective August 8, 2026

Cookies and Tracking

The DefenseScore website (defensescore.com)

The Site does not use advertising or analytics cookies and does not load third-party trackers. Because we self-host fonts and front-end assets, your browser does not request resources from third-party servers as a result of visiting the Site.

The DefenseScore application (app.defensescore.com)

The application uses two cookies, both strictly necessary. Neither is used to advertise to you or to follow you across other websites.

  • A session cookie, set by the application when you sign in. It keeps you signed in and protects forms against cross-site request forgery. It is removed when your session ends. The application cannot be used while it is blocked.
  • A Cloudflare access cookie (CF_AppSession, and after sign-in CF_Authorization), set by Cloudflare when your browser first reaches app.defensescore.com — before you sign in. It runs the access-control check that sits in front of the application. Cloudflare provides this service to us as a processor and is listed on our subprocessor page.

We do not set advertising cookies, retargeting or behavioral-tracking pixels, or cross-site tracking cookies of any kind, and we do not integrate with data brokers. We do not set analytics cookies, and we do not set preference or "functional" cookies.

We do count a small number of anonymous events — for example, that a pricing section was viewed or a contact link was clicked. Those counts are kept as day-level totals only. They set no cookie, use no visitor identifier, and record no IP address, device information, or anything else about you.

Your choices. You can block or delete cookies in your browser's settings, and the Site will work normally with every cookie blocked. Blocking the two application cookies means you will not be able to sign in to app.defensescore.com — that is the only thing that stops working.

Changes and questions. If we start using a different kind of cookie, we change this section before we do, not after. Questions: [email protected].


DefenseScore is a product of Ellis Intelligence LLC. This page is posted for transparency and is not legal advice. See also our Privacy Policy and Terms of Service. Questions about this document? Email [email protected].

Self-assessment tool — not a C3PAO. DefenseScore is a self-assessment software tool. It is not a C3PAO, not an assessment, not legal or compliance advice, and does not certify CMMC compliance.

Not affiliated with the U.S. Government. DefenseScore is not affiliated with, endorsed by, sponsored by, or acting on behalf of the U.S. Department of Defense (DoD), the Defense Contract Management Agency (DCMA), the Supplier Performance Risk System (SPRS), NIST, or any other government agency or standards body, and nothing on this site or the Service is, or should be read as, an official communication, determination, or prediction by any of them.

© 2026 Ellis Intelligence LLC  ·  d/b/a DefenseScore  ·  Colorado single-member LLC  ·  Terms  ·  Privacy  ·  Cookies  ·  Acceptable Use  ·  DPA  ·  Subprocessors