Last updated: October 14, 2026
We’re a security site, so we hold ourselves to the standard we write about.
What we collect
- Analytics: aggregated, privacy-respecting page statistics (no cross-site tracking, no ad profiles).
- Newsletter: your email address, if you subscribe — used only to send the newsletter. Signup is double opt-in (we email you a confirmation link first). As proof of consent we store the signup time, the page you subscribed from, and the IP address and browser identifier of the signup request — nothing else, and never for tracking. The weekly digest goes out on Tuesday at 8 a.m. Eastern or 8 a.m. Pacific: to choose which, we estimate your approximate region from that signup IP address (IP geolocation by DB-IP). Only the resulting send-time group is used; no location is stored or shared. Data is stored on our own server, not with a third-party list provider. Unsubscribe with one click, and we delete your address.
- Contact form: your email address, subject and message, used only to reply. The form forwards them to our editors’ inbox; a copy, with the sending IP address and browser identifier (kept to stop spam and abuse), is stored on our own server and deleted after 90 days.
What we don’t do
- No sale or sharing of personal data.
- No third-party advertising trackers.
- Outbound retail links (e.g. Amazon) carry an affiliate tag; the retailer’s own privacy policy applies on their site.
Your rights
EU/EEA visitors have GDPR rights of access, correction and erasure. Email us and we’ll handle it within 30 days.
Contact: via the contact page.