Privacy Policy
Last Updated: January 3, 2026
Your data is protected
Encrypted connections
Privacy focused
Secure storage
1. Introduction
Cyber Incident ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
Information You Provide:
- Email addresses (for breach checking and verification)
- Passwords (hashed locally, never transmitted or stored)
- IP addresses and domains (for reputation checking)
Automatically Collected:
- IP address
- Browser type and version
- Device information
- Usage data and analytics
From Third Parties:
- Breach data from security research databases
- Threat intelligence from partner services
3. How We Use Your Information
- To provide breach checking and security awareness services
- To verify email ownership via magic links
- To send security alerts and monitoring notifications
- To improve our services
- To process payments for premium services
- To comply with legal obligations
4. Information Sharing
We do NOT sell your personal information.
We may share information with:
- Service Providers: Payment processors (Stripe), email services
- Security Partners: When necessary to provide protection services (CrowdStrike, Vijilan)
- Legal Requirements: When required by law or to protect rights
5. Data Retention
- Search queries: Retained for 90 days for service improvement
- Account information: Retained while account is active
- Payment information: Handled by Stripe per their privacy policy
6. Your Rights
You have the right to:
- Access your personal data
- Request deletion of your data
- Opt out of marketing communications
- Export your data
To exercise these rights, contact: privacy@cyberincident.org
7. Security
We implement reasonable security measures. However, no system is completely secure. We are not liable for unauthorized access beyond our reasonable control.
8. Third-Party Services
Our Service uses third-party providers including:
- Vijilan
- CrowdStrike
- Stripe
- Various threat intelligence APIs
Each third-party service has its own privacy policy governing how they handle data.
9. Cookies and Tracking
We use essential cookies for site functionality and authentication. We do not use advertising cookies or sell your data to advertisers.
10. Children's Privacy
Our Service is not intended for children under 13. We do not knowingly collect information from children under 13.
11. International Users
Your information may be transferred to and processed in the United States where our servers are located.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy with an updated date.
13. Contact Information
For privacy questions or concerns:
Email: privacy@cyberincident.org