Privacy

This site is a personal, independent publication. It is built to collect as little about you as possible.

What I don't collect

No cookies, no analytics, no advertising or tracking scripts.
No accounts or sign-ups.
Fonts and images are served from this site, so no third-party font or image service sees your visit.

Server logs. Like any website, the hosting provider records technical request data (IP address, browser type, page requested, time) to deliver the site and protect it from abuse. These logs are kept by the host for a short period and are not used to identify you.
The "Ask a question" assistant. When you ask, your question is sent to Anthropic's Claude AI to write the answer, together with this site's public articles. This site doesn't store your question or the answer, and keeps no chat history. Anthropic processes the request under its commercial API terms, which by default do not allow using it to train their models. Don't include passwords or confidential information.
The newsletter. If you subscribe, your email address is kept by Buttondown, the newsletter service, only to send new-article emails. Every email has an unsubscribe link.
The contact form. If you send a message, the name, email address, topic and message you enter are delivered to me through a form-handling service so I can reply. I use them only to answer you, and delete them when the conversation is over or on request.

The Threat Pulse page shows public data from the CISA Known Exploited Vulnerabilities Catalog. It contains no personal data.

Articles link to sources such as CISA, NVD and LinkedIn. Those sites have their own privacy policies.

You can ask me to see, correct or delete anything you've sent through the contact form. Use the same form, or message me on LinkedIn.