Privacy

Page views. Each page view is recorded first-party: the path, the page title, the referring page, the browser's user-agent string, the IP address the request arrives from, and how long the page stayed open. A random session identifier groups the views of one visit; it is held in the browser's sessionStorage, it is not a cookie, and it is discarded when the tab closes. The IP address is used to rate-limit abuse and to record an approximate country, and is not published or shared. The record is written through a server-side function into a managed PostgreSQL database.

Newsletter. Subscribing stores an email address and the page the subscription came from, and nothing else. It is kept until you unsubscribe, which you can do by replying to any message.

Enquiries. There is no contact form on this site. An enquiry is an ordinary email to the address on the contact page, held in an ordinary mailbox, and answered from it.

The site is hosted on Lovable, and the hosting platform injects its own analytics script into every page. That script is not part of this repository and is not under editorial control. It reports Core Web Vitals and other page-performance measurements, the referring page, and a coarse country derived from the browser's time zone, and it sets a session-id cookie that lasts thirty minutes. The network in front of the site, Cloudflare, sets a __cf_bm cookie to tell automated traffic from human traffic. Neither cookie is used for advertising, and neither follows you to another site.

There is no advertising network, no cross-site or cross-device tracking, no profiling, and no third-party analytics, chat, heat-map or error-reporting SDK added by this publication. Nothing collected here is sold, rented, or shared for anyone else's marketing. Typefaces are served from this site, so reading a page contacts no font host.

Collected data is stored in a managed PostgreSQL database and is reachable only by the publication. It is not shared with anyone beyond the infrastructure providers needed to run the site: hosting, the database, and the network in front of it.

You can ask for a copy of what is held about you, ask for it to be corrected or deleted, or unsubscribe from the newsletter. There is no time limit and no reason is needed. Email grcide007@gmail.com and it will be handled.

The apps in the Lab have their own privacy positions, which are described on their own pages — the ISM Security Handbook's is set out on its page. Nothing on this page describes the apps, and nothing in the apps feeds the analytics described above.