LEGAL
Privacy Policy
This site collects almost nothing, so this policy is short and specific. It describes exactly what happens to information you give us or generate by visiting cyberbackstop.com.
What we collect
Information you send us through the contact form. Your name, email address, optionally your company name and a category selection, and whatever you write in the message field. That’s it — the form asks for nothing else, and we don’t ask for or want payment details, government identifiers, or credentials at any point.
Information you send us by email. If you email us directly, we have your message and whatever your mail client includes with it.
Standard server logs. Our hosting provider records basic technical information about requests to this site — IP address, timestamp, requested URL, referrer, and user agent — as essentially all web servers do. We use these only for security and to keep the site running, and we do not use them to build a profile of you or link them to form submissions.
What we do not collect
- No cookies. This site sets no cookies of any kind — not for analytics, not for advertising, not for preferences, not “essential” ones. That is why you were never shown a cookie banner.
- No analytics. There is no Google Analytics, no Plausible, no Fathom, no Matomo, no server-side analytics product, and no first-party analytics of our own. We do not know how many people visit this site beyond what raw server logs show.
- No tracking pixels, no advertising tags, no session recording, no heatmaps, no fingerprinting.
- No third-party embeds. No chat widget, no scheduling widget, no video embed, no social buttons, no comment system.
- No accounts. There is nothing to log into.
- No mailing list. We don’t run one. Writing to us does not subscribe you to anything.
Third parties
We have kept these to the practical minimum. There are exactly three, and none of them receive your contact form contents for their own purposes.
Our hosting provider. This site is served from a static hosting platform, which processes the server log data described above in order to deliver pages and defend against abuse.
Google Fonts. This site loads its typefaces from
Google’s font service. That means your browser makes a request to a
Google server, and Google receives your IP address and user agent as part of
that request, as it would for any resource loaded from another domain. We do
not send Google anything about you beyond what that request inherently
carries, and no cookie is set by it. If you prefer to avoid it entirely,
blocking fonts.googleapis.com and fonts.gstatic.com
will cause the site to render in your system fonts and change nothing else.
Our email provider. Contact form submissions and email correspondence reach us as email, so our mail provider processes them the way any mail provider processes mail.
How we use what you send
Only to reply to you and, if we end up working together, to carry out that engagement. We do not sell it, rent it, trade it, or share it with anyone for their own purposes. We do not use it to advertise to you, and we do not use it to train anything.
How long we keep it
Contact form submissions and email correspondence are kept for as long as we may reasonably need them for the conversation and for our business records — and if a conversation goes nowhere, we’re happy to delete it sooner on request. Server logs are retained on our hosting provider’s standard schedule, which is short.
How we protect it
Access to submissions is limited to the people at CyberBackstop who need it to reply to you. The site is served over HTTPS. We are a security consultancy, so we will spare you the sentence about taking your data seriously and simply say that we hold ourselves to the practices we recommend to clients. No system is perfectly secure and we won’t claim otherwise.
Your choices and rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@cyberbackstop.com and we’ll handle it — normally within 30 days, and usually much faster, because there generally isn’t much to handle.
Depending on where you live, you may have specific rights under laws such as the California Consumer Privacy Act or the EU/UK General Data Protection Regulation. We will honour requests of this kind regardless of whether a particular law applies to you, because the alternative is arguing about jurisdiction rather than just deleting a form submission.
We have never sold or shared personal information for advertising purposes and have no plans to. There is no opt-out link because there is nothing to opt out of.
Do Not Track
We don’t track you, so a Do Not Track or Global Privacy Control signal changes nothing about how this site behaves. The behaviour it asks for is already the behaviour you get.
Children
This site is aimed at businesses and is not directed at children under 13. We do not knowingly collect information from them. If you believe a child has sent us something, write to us and we’ll delete it.
Where we operate
CyberBackstop is based in North Carolina, United States, and information you send us is processed there.
Changes
The version posted here is the one that applies. If a change is significant — for example, if we ever add analytics — we’ll describe it plainly here rather than quietly widening a paragraph.
Contact
Questions about this policy: hello@cyberbackstop.com