Last updated: August 27, 2026
Privacy
This is a security site, so the privacy policy is written the way I would want to read one: short, specific, and honest about what happens to your data.
What this site collects
- Nothing, by default. Browsing the site sets no cookies and runs no advertising trackers.
- Briefing subscriptions. If you subscribe, your email address is stored so new posts can be sent to you. Subscription is double opt-in: nothing is ever sent until you confirm from your own inbox, and unconfirmed signups are purged automatically within seven days.
- Assistance requests. If you send a request, the name, email, organization, and message you type are delivered to my inbox and retained so I can respond and keep context if we work together.
- Abuse prevention. The form backend keeps a salted hash of your IP address for rate limiting only, purged within two hours. Raw IP addresses are not stored.
What this site does not do
- No sale or sharing of your email address or request contents with anyone, ever.
- No ad networks, no tracking pixels, no fingerprinting.
- No engagement tracking inside emails.
Third parties involved
- Vercel hosts the site and, like any host, sees standard request logs.
- Cloudflare runs the form and email backend and stores the subscriber list.
- Resend delivers the emails.
- Google Fonts serves the typefaces, which means your browser requests font files from Google.
- Outbound links to affiliate partners are covered in the disclosure; once you click through, their privacy policies apply, not this one.
Deleting your data
Every email sent to subscribers carries a one-click unsubscribe link. Unsubscribing is deletion: your address is removed outright, not flagged as inactive. For anything else, including deleting a past assistance request, email parker@thestateofcybersecurity.us and it will be handled directly.