Cookie Policy

1. Purpose of This Cookie Notice

This Cookie Notice explains how Zaruba INC (formerly BlueBird IT LLC), a California stock corporation (the "Company," "Zaruba," "we," "us," or "our"), uses cookies and similar technologies on our website at https://zaruba.tech (the "Site"). This Cookie Notice supplements, and should be read together with, our Privacy Notice.

2. Our Consent Architecture

Most modern websites use third-party Consent Management Platforms ("CMPs") — such as OneTrust, Cookiebot, TrustArc, Termly, or similar services. These platforms typically load JavaScript from external domains, transmit visitor information to those external domains, and store consent records on infrastructure that is not controlled by the website operator.

We do not use any third-party CMP. Our cookie banner, our preference center, and the storage of your consent choices are operated entirely on our own infrastructure — your consent state is stored in a first-party cookie in your own browser, and we do not transmit your consent decisions to any third-party CMP for storage or processing.

However, this Site does integrate a limited set of authorized third-party services that may set cookies or collect technical information from your browser, including Google Tag Manager, Google Analytics 4, Cloudflare (where deployed), and a Captcha provider (Google reCAPTCHA / Cloudflare Turnstile). These services are described in Sections 4 and 5 below, with links to their own privacy policies. Where applicable, these services are covered by written data-processing, service-provider, contractor, or similar contractual terms. However, analytics, advertising, embedded-media, and social-media providers may also process data for their own purposes as independent controllers, third parties, businesses, or similar roles under applicable law. You should review their privacy notices for more information.

We have made this hybrid design choice deliberately:

-       The Site is used by representatives of the United States Department of Defense, federal agencies, prime contractors, and allied governments, and limiting the third-party JavaScript footprint of the Site is consistent with the operational-security expectations of those visitors;

-       At the same time, Google Analytics and Google Tag Manager are industry-standard tools that allow us to operate effective marketing analytics and retargeting workflows without imposing a custom internal data-engineering burden that would not be sustainable for a defense-engineering company.

3. What Is a Cookie

A "cookie" is a small text file placed on your device by a website you visit. We also use related technologies that perform similar functions, including HTML5 local storage, server-side session identifiers, and, where applicable, pixel tags. References in this Cookie Notice to "cookies" include those technologies.

A "first-party" cookie is set by the domain you are visiting (in this case, zaruba.tech). A "third-party" cookie is set by a different domain. This Site uses both first-party cookies (set by zaruba.tech) and third-party cookies set by authorized Service Providers (Google, and where deployed, Cloudflare and others), as listed in the Cookie Inventory below.

4. Categories of Cookies We Use

4.1 Strictly Necessary Cookies

Required for core functionality of the Site, such as session security, CSRF protection, load balancing, fraud prevention, anti-bot challenge (Captcha), and remembering your privacy preferences. Cannot be disabled because the Site cannot function properly or securely without them. We rely on these cookies under the legitimate interest of operating a secure website. These cookies do not require opt-in consent under applicable law.

May include cookies set by Cloudflare (e.g., __cf_bm, cf_clearance) for bot mitigation, and by Google reCAPTCHA / Cloudflare Turnstile for form anti-bot challenge.
These cookies are used only to the extent necessary to operate, secure, and maintain the Site.

4.2 Analytics & Performance Cookies — Google Analytics 4

We use Google Analytics 4 ("GA4", Measurement ID G-STKBQS3DHF) to understand how visitors use the Site (which pages are viewed, time on page, navigation paths, conversion events on contact / RFI forms). GA4 cookies include _ga, _ga_STKBQS3DHF, _gid, and _gat. Data collected by GA4 is processed by Google LLC under its own privacy policy at https://policies.google.com/privacy. Google acts as our Service Provider under the Google Analytics Data Processing Terms.

These cookies are set only after you opt in via the cookie banner. If you transmit a Global Privacy Control (GPC) signal, GA4 is automatically disabled for your session via Google's Consent Mode v2. Analytics cookies are disabled by default and are activated only after you opt in through the cookie banner or cookie preference center.

GA4 data retention is set to 14 months (privacy-maximizing default) under Google's data-retention controls.

4.3 Marketing / Tag Management Cookies — Google Tag Manager

We use Google Tag Manager ("GTM", Container ID GTM-K74F5M53) to deploy and manage marketing tags without requiring code-level changes. GTM itself does not generally set cookies that collect personal data, but tags deployed via GTM may set cookies or collect information depending on their configuration.  (for example, Google Ads conversion tracking via _gcl_au).

GTM operates under Google's privacy policy: https://policies.google.com/privacy and https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/. GTM is loaded with Consent Mode v2 in default-denied state; tags that depend on analytics or advertising consent are not fired until you opt in.

4.4 Functional / Preference Cookies

If enabled, these cookies remember website preferences such as language and accessibility settings. We currently use first-party functional cookies (pref_lang, pref_a11y) only after you opt in.

4.5 Advertising / Cross-Context Behavioral Tracking Cookies

The table below distinguishes between advertising platforms that are currently active and platforms that are planned for future deployment. Planned platforms must not be activated unless this Cookie Notice and the Cookie Inventory are updated and, where required, users are asked to provide consent again.

Important: Any cookie set by one of these advertising platforms is deployed only via Google Tag Manager with explicit user opt-in via the "Marketing / Tag Management" category in the cookie banner. As of the Effective Date, the active advertising tags are: Google Ads and YouTube embed (in privacy-enhanced mode). Other platforms may be activated incrementally. If activated, this Cookie Notice and the Cookie Inventory below will be updated, and, where required by applicable law, users will be asked to provide consent again before those technologies are used.

4.6 Sensitive Personal Information

We do not use Sensitive Personal Information ("SPI") in cookies. We do not intentionally transmit SPI to Google Analytics, Google Tag Manager, or any advertising platform, and such tools should be configured to prevent the collection of SPI.

5. Cookie Inventory

The table below reflects cookies in use as of the Effective Date. We update this inventory at least quarterly (per Principle 9 of our Cookie Banner architecture).

If additional advertising platforms are activated (Meta Pixel for Facebook/Instagram/Threads, LinkedIn Insight Tag, Reddit Pixel, X Pixel, WhatsApp Business pixel), this inventory will be updated and users will be re-prompted for consent.

6. Embedded Third-Party Content

If Zaruba adds embedded third-party content or tools beyond those listed in Section 5 — for example, additional embedded videos, social-media widgets, maps, font services, or interactive elements hosted by a third party — we will:

-       update this Cookie Notice to disclose the third party;

-       update our Cookie Inventory above;

-       where required, request additional consent before those technologies are activated; and

-       where possible, configure such embeds in privacy-enhanced mode (for example, YouTube Privacy-Enhanced Mode at youtube-nocookie.com) or self-host the content to avoid data leakage to third-party domains.

7. Your Choices

You may at any time:

-       Accept or reject the use of optional cookies (Analytics, Marketing, Functional) through the cookie banner that appears on your first visit;

-       Change your selections by clicking "Cookie Preferences" in the footer of any Site page;

-       Withdraw optional cookie consent by clicking “Withdraw Optional Cookie Consent” or “Cookie Preferences” in the cookie preference center. This action will clear optional cookies where technically possible and transmit denied consent signals to Google Tag Manager for optional categories under Consent Mode v2

-       Opt out of cross-context behavioral advertising by enabling the Global Privacy Control (GPC) signal in your browser (https://globalprivacycontrol.org). We honor GPC for the browser sending the signal;

-       Use the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout — this prevents GA4 from collecting data across all sites that use GA4.

You can also manage cookies at the browser level via your browser settings (typically under "Privacy" or "Security"). However, please note: browser-level cookie blocking is not the same as withdrawing email-marketing consent (CAN-SPAM requires a functional unsubscribe link in marketing emails; browser settings do not satisfy this).

8. Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control opt-out preference signal. When the Site receives respective request:

1. We treat it as a verifiable consumer request to opt out of the sale and sharing of personal information for the browser sending the signal.
2. We configure Google Tag Manager and Google Analytics in Consent Mode v2 to deny analytics_storage and ad_storage for that session.
3. We do not write optional cookies for that browser.

Where technically implemented, we may display a one-time GPC Honored notification to confirm that the opt-out has been recognized.

9. Re-Consent Triggers

We will prompt you to re-consent to cookies when:

-       the categories of cookies we use materially change;

-       we add a new advertising platform or other vendor that sets cookies (for example, activating the Meta Pixel for Facebook / Instagram, LinkedIn Insight Tag, Reddit Pixel, or X Pixel);

-       material changes are made to our Privacy Notice;

-       twelve (12) months have elapsed since your previous consent.

10. Third-Party Service Privacy Notices

Some of these providers may act as our service providers or contractors. Others, especially analytics, advertising, embedded-media, and social-media providers, may also process information for their own purposes as independent controllers, third parties, businesses, or similar roles under applicable law. Each authorized third-party service used on the Site operates under its own privacy policy. We are not responsible for the data-processing practices of these providers; you should review their policies directly:

11. Contact Us

For questions about this Cookie Notice or to exercise your cookie preferences, please contact:

Zaruba INC (formerly BlueBird IT LLC)

Attn: Privacy Office

10755 Massachusetts Avenue, Suite 201

Los Angeles, California 90024

United States of America

Privacy Email: [email protected]

General Email: [email protected]

Web Request Form: https://zaruba.tech/privacy-request

California Office (operational):

18344 Oxnard Street, Suite 107

Tarzana, California 91356

United States of America