Privacy Policy

Effective: September 8, 2026 · Last updated: September 8, 2026

This Privacy Policy describes how Cyber Informants (“we,” “us,” or “our”) collects, uses, and shares information about you when you visit cyberinformants.com (the “Site”), subscribe to our newsletter, enroll in Academy offerings, or otherwise interact with our services (collectively, the “Services”). By using the Services, you agree to the practices described here.

1. Who we are

Cyber Informants is the controller of personal information collected through the Services. You can reach us at:

2. Information we collect

We collect a small amount of information, only as needed to operate the Services.

Information you provide

  • Email address when you subscribe to The SE Notebook newsletter, request a download, or contact us directly.
  • Survey responses when you choose to answer optional reader surveys (used to tailor the content and offers we send you).
  • Payment and billing information when you purchase a paid product or Academy offering. Payments are processed by our payment partners; we do not store full card numbers on our systems.

Information collected automatically

  • Site analytics. We use Google Analytics to understand aggregate site usage, such as page views and traffic sources. Google Analytics may use cookies and similar technologies to collect this information. We use it to improve the Services, not to identify individual visitors for marketing purposes.
  • Standard server logs. Like most websites, our hosting provider retains short-lived request logs (IP address, user agent, timestamp, URL) for security and abuse prevention.

3. How we use your information

  • To send you The SE Notebook and any newsletters or downloads you request
  • To deliver and support paid products or Academy offerings you purchase
  • To respond to your inquiries and customer service requests
  • To personalize the content and offers we show you, based on optional survey responses
  • To measure aggregate site usage and improve the Services
  • To detect, prevent, and address fraud, abuse, or security issues
  • To comply with legal obligations

4. How we share your information

We never sell, rent, or trade your personal information. We share it only with the following categories of recipients, and only as needed to operate the Services:

Service providers

  • Kit (formerly ConvertKit) — sends and manages our newsletter and email broadcasts.
  • Vercel — hosts the Site.
  • Google Analytics — provides aggregate website usage analytics.
  • Payment processors — process purchases for paid products and Academy offerings.

These providers only receive the information they need to perform their specific function and are contractually required to protect it.

Newsletter sponsors

From time to time, the newsletter may be supported by sponsors. Sponsors do not receive your personal information. The only data we share with a sponsor is the total number of clicks their placement received. Individual subscriber data, email addresses, and behavior are never shared with sponsors.

Legal disclosures

We may disclose information if we believe in good faith that doing so is required by law, court order, or to protect the rights, property, or safety of Cyber Informants, our subscribers, or the public.

Business transfers

If Cyber Informants is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Cookies and tracking technologies

The Site does not set marketing or advertising cookies directly. We use only what is necessary to understand how the Site is used and to operate the Services:

  • Google Analytics cookies to measure aggregate site traffic and usage patterns.

Third-party services we use (Kit, payment processors) may set their own cookies on their own domains under their respective privacy policies.

6. Data retention

We retain personal information only as long as needed to provide the Services and to meet our legal obligations.

  • Subscriber emails are retained until you unsubscribe or request deletion. You can unsubscribe at any time using the link at the bottom of every email.
  • Customer purchase records are retained as required by tax and accounting law (typically seven years).
  • Server logs and analytics are retained on a rolling basis, typically no more than 90 days.

7. Your rights

You have the following rights regarding the personal information we hold about you. To exercise any of them, email hello@cyberinformants.com.

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to correct information that is inaccurate.
  • Deletion — ask us to delete your personal information.
  • Unsubscribe — opt out of marketing emails at any time. The link is in every email we send.

Residents of the EEA, UK, and Switzerland (GDPR)

If you live in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to object to or restrict our processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local data protection authority. We rely on your consent (when you subscribe) and our legitimate interests (operating and improving the Services) as our legal bases for processing.

California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

8. International transfers

We are based in the United States, and our service providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers of personal information out of the EEA, the UK, and Switzerland.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure; however, we work with reputable service providers who maintain industry-standard security practices.

10. Children’s privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Third-party links

The Site may link to third-party websites and services (for example, Kit for newsletter management, social media profiles, or partner tools referenced in our content). Their privacy practices are governed by their own policies, which we encourage you to review.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will provide a more prominent notice (such as an email to current subscribers).

13. Contact us

Questions or requests regarding this Privacy Policy can be sent to: