Privacy policy

Data controller

CyberWorldOps.

For any request about your personal data, write to [email protected].

Data we collect

You do not need to register or provide personal data to read the site. There is no public public account area and requires no account. The optional newsletter stores an email address only after double opt-in confirmation; every message provides immediate unsubscribe.

Our servers log technical data (IP address, browser type, pages requested, date and time) for security and diagnostics.

Cloudflare Web Analytics also measures pages and performance in aggregate when you refuse Google Analytics. It helps us understand this site’s traffic: we add no cookies, persistent identifiers or fingerprinting to recognise readers. The dashboard temporarily holds only totals and public page paths, without queries, IP addresses or individual profiles.

We measure visits to understand which articles work. We use Google Analytics 4, which loads only after you consent: if you refuse, the measurement script never runs and no statistics cookie is stored.

With your consent Google Analytics records the page opened, the site you arrived from, the country, the browser type and how long you stayed, and sets the _ga and _ga_<ID> cookies (180 days at most). The data is aggregated into statistical reports and we do not use it to build advertising profiles.

You can change that choice at any time from "Analytics preferences" at the bottom of every page.

Newsletter

If you subscribe, we process your email address, selected language, consent timestamp and technical delivery results. The legal basis is consent under Article 6(1)(a) GDPR, confirmed through double opt-in.

We use this data only to send the weekly briefing and manage delivery and unsubscribe requests. We retain the address while the subscription is active; after unsubscribe, we keep only the minimum record needed to honour the withdrawal and prevent further mail.

You may withdraw consent at any time through the link in every email or by writing to [email protected]. Withdrawal does not affect processing already carried out.

Where your data is processed

The site is hosted on netcup GmbH servers located in Germany, inside the European Union.

Traffic passes through Cloudflare, which acts as a content delivery network and security filter: to do so it processes the IP address and technical request data, and may set cookies strictly necessary to protect against abuse.

Advertising

The site currently shows no advertising and carries out no profiling for advertising purposes.

The Google AdSense script is however already present, as it is required to verify the domain ahead of activation. It sets one technical Google cookie (FCCDCF) used to record consent choices; no advertising cookies are set and no ad is selected.

When advertising is switched on this policy will be updated, and consent from visitors in the EEA and the UK will be collected through a Google-certified consent management platform (IAB TCF v2.2) before any advertising cookie is set.

Legal basis and purposes

Technical and security data (server logs, Cloudflare protection): the controller’s legitimate interest in delivering the service securely and correctly, under Article 6(1)(f) GDPR.

Statistics cookies (Google Analytics) and, once it is live, personalised advertising: user consent under Article 6(1)(a) GDPR, withdrawable at any time.

Retention

Server logs are kept for at most 30 days, unless they must be held longer to establish or defend against abuse or an attack.

Cloudflare security logs follow the provider’s own retention periods.

Cloudflare makes up to 6 months of Web Analytics statistics available; it retains unsampled beacons for 7 days and aggregated data for later periods. Our dashboard uses the last 7 days and caches results only in memory, for at most 5 minutes.

Google Analytics is configured to retain user and event data for 2 months, without resetting user retention on each visit. This setting does not apply to most of Google’s standard aggregated reports.

Transfers outside the European Union

Cloudflare and Google are US companies and may process data outside the European Union. Those transfers rely on the EU-US adequacy decision (EU-US Data Privacy Framework) and on the standard contractual clauses adopted by the providers.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection under Articles 15-22 GDPR at any time.

Write to [email protected]. You also have the right to lodge a complaint with your data protection authority.