PX Tracking Technology Privacy

1. What Is PX Tracking

PX (PerimeterX, now part of HUMAN Security) is a cybersecurity technology designed to detect and mitigate automated bot traffic, credential stuffing attacks, account takeover attempts, and other malicious activities on our website. It helps us ensure that our website remains available, secure, and functional for legitimate users like you.

Unlike advertising tracking technologies, PX is not used to serve personalized advertisements, build marketing profiles, or sell your data to third parties. Its primary purpose is security and fraud prevention. When you visit our website, PX may collect certain technical information about your browser and device to distinguish between human users and automated bots.

PX technology operates in the background of our website and is designed to be as unobtrusive as possible while providing essential security protections. It does not slow down your browsing experience or interfere with your ability to use our website.

2. Data Collected by PX

When you visit our website, PX may collect the following types of technical information:

• Device fingerprint data: Information about your device, including operating system, browser type and version, screen resolution, installed plugins, timezone, language settings, and other configuration details. This helps create a unique identifier for your device that distinguishes it from automated bots.
• Network information: Your IP address (which may be truncated or anonymized), network type, and connection details. This information helps identify patterns associated with bot networks or suspicious traffic sources.
• Behavioral data: Mouse movements, keystroke timing, scroll behavior, click patterns, and navigation patterns on our website. These behavioral signals help PX differentiate between human users and automated scripts.
• HTTP request headers: Standard HTTP headers sent by your browser, including user agent string, referrer, and accepted content types. These headers provide context about your browser environment.
• Cookies and local storage: PX may set and read cookies or use local storage to maintain a session identifier and risk assessment. These cookies are used solely for security purposes and not for advertising or tracking across websites.

3. How PX Tracking Works

PX technology operates through several layers of detection and analysis:

• JavaScript sensor: A lightweight JavaScript code embedded in our website pages collects behavioral and device data as you browse. This sensor runs in the background and does not affect page load times or your browsing experience.
• Real-time analysis: The collected data is sent to PX servers for real-time analysis using machine learning models and behavioral algorithms. These models have been trained on billions of requests to accurately identify bot patterns and malicious behavior.
• Risk scoring: Based on the analysis, each request is assigned a risk score. Low-risk requests from legitimate users proceed normally. High-risk requests may be challenged with a CAPTCHA, rate-limited, or blocked entirely.
• Challenge mechanisms: If PX detects suspicious activity, it may present a challenge (such as a CAPTCHA) to verify that you are a human user. Completing the challenge allows you to continue browsing normally.

4. Purpose and Use of Data

The data collected by PX is used exclusively for security and fraud prevention purposes. Specifically, we use this data to:

• Protect against automated attacks: Prevent bot-driven attacks such as credential stuffing, content scraping, and DDoS attacks that could compromise our website's availability and security.
• Prevent account takeover: Detect and block attempts to gain unauthorized access to user accounts through brute force or credential stuffing attacks.
• Ensure fair access: Prevent automated systems from consuming disproportionate resources, ensuring that our website remains responsive and available for all legitimate users.
• Improve security: Continuously improve our security posture by analyzing attack patterns and adjusting our defenses accordingly.

We do not use PX data for advertising, marketing, profiling, or any purpose other than security. PX data is not sold, shared, or transferred to any third party for commercial purposes.

5. Data Sharing and Third Parties

The data collected by PX is shared only with HUMAN Security (the provider of PX technology) for the purpose of providing the bot detection and mitigation service. HUMAN Security processes this data as our service provider and is contractually obligated to:

• Process data only for the specified purpose: HUMAN Security uses the data solely to provide the bot management service to us and does not use it for its own commercial purposes.
• Maintain data confidentiality: HUMAN Security is required to maintain the confidentiality and security of all data processed under the service agreement.
• Comply with applicable laws: HUMAN Security complies with all applicable data protection laws and regulations in its processing of data.

PX data is typically retained for a short period (usually 30 to 90 days) and is then automatically deleted. Anonymized and aggregated data may be retained for longer periods for security research and threat intelligence purposes, but such data cannot be used to identify individual users.

6. Your Rights and Choices

While PX technology is essential for maintaining the security of our website, we respect your right to control your data. You have the following options:

• Cookie management: You can manage or delete cookies set by PX through your browser settings. However, please note that deleting PX cookies may trigger additional security checks on subsequent visits to our website.
• Data access requests: You have the right to request access to the personal data collected about you by PX. To submit such a request, please contact us using the information below.
• Data deletion requests: You can request that we delete any personal data collected by PX about you. We will comply with such requests unless we are legally required to retain the data.
• Opt-out of tracking: If you wish to opt out of PX tracking, you may do so by contacting us. However, please be aware that opting out may result in additional security challenges when browsing our website, as we need alternative methods to verify that you are a legitimate user.