- Home
- Privacy
What this site collects
We sell security services, so it would be a poor look to be vague about our own data handling. This page says exactly what is collected, why, and how to stop it.
Everything stays with us
There is no Google Analytics on this site, no advertising pixel, no embedded tracker and no third-party script of any kind. What little we record is stored on infrastructure we own and operate, in the same way we handle client data during an engagement.
We do not sell, rent or trade any of it, and we do not share it with third parties. Nothing is sent to an outside service to be analysed: even the location lookup described below runs on our own server, against a database we keep there.
Every visit: the request log
Like almost every web server, ours keeps a record of each request it receives, whether or not you accept the banner. Each entry holds your IP address, the time, the page requested and whether it loaded, your browser's user-agent string, and the domain of the site that linked you here, if any. From the IP address we work out an approximate location, country and city, and the network it belongs to, such as your internet provider or employer, using databases held on our own server. Requests that look like attacks are flagged as they arrive. No cookie is involved.
We use this record for two purposes only: security, abuse and spam prevention, such as spotting attacks, automated scanning and fraudulent enquiries; and internal analytics, understanding how the site is used and where visitors come from. It is never used for advertising and never combined with information from anywhere else.
If you consent
Accepting the banner sets a cookie holding a random identifier. It is not your name, your email, or anything derived from you. It lets us see one visitor's route through the site rather than a pile of disconnected page views.
With consent, your page views are also linked to your entries in the request log, so we can see how long you spent on each page rather than estimating it.
With consent, each page view records:
- The page you were on and its title
- When you arrived
- How long the page was actually in front of you
- How far down the page you read
- The site that linked you here, if any, and only its domain name
- Which browser family you use, not the full browser fingerprint
Your IP address
We keep it, as part of the request log above, for security, abuse and spam prevention and for internal analytics. It is deleted after 90 days. It is never sold, never shared with a third party, and never sent to an outside service, including for the location lookup.
If you write to us through the contact form, the address you wrote from is also kept with your message for as long as we keep the enquiry, because it is part of the record of a conversation you chose to start with us.
How long we keep it
The request log, including IP addresses, is deleted after 90 days. Page views are deleted after roughly thirteen months. Anything we identified as an automated crawler goes after thirty days. Enquiries sent through the contact form are kept as business correspondence until you ask us to delete them.
Changing your mind
Use the control in the footer to turn tracking off. It deletes everything recorded against your identifier immediately, not at the end of a retention period, and stops any further collection. You can also decline at the banner, in which case no identifier is ever created. Neither affects the request log, which is kept for security whatever you choose and expires after 90 days. Write to us if you want your entries removed sooner.
Asking us about your data
Write to us and we will tell you what we hold and remove it on request. In practice there is very little to find, which is rather the point of designing it this way.