Privacy Policy

The CloudySec Digest is a static publication. We do not run ads, do not track you across websites, do not set marketing cookies, and do not require you to register or submit any data to read it. We use a single cookieless, privacy-friendly analytics signal (Vercel Web Analytics) to count aggregated page views — it sets no cookies and stores no IP address. The only personal data we process is what your browser unavoidably sends when it requests a page (your IP address, user-agent, and the page you asked for), plus a small preference (theme and reading desk) that your browser keeps in its own local storage.

The party responsible for the data described below (“controller” under Art. 4(7) GDPR) is:

For full company details, see the Legal Notice.

Server access logs

Each time your browser requests a page, our hosting provider records the IP address, the user-agent string, the requested URL, the HTTP status, the timestamp, and the referrer (if any). This is standard for any web server and is necessary for security, abuse prevention, and reliability.

Reading preferences

Your chosen colour theme (light or dark) and your selected reading desk are stored in your browser’s localStorage. These values never leave your device and are visible only to your browser when it loads our site.

Aggregated page views

We use Vercel Web Analytics, a cookieless analytics service by Vercel Inc. (United States). It records the path you visited, the referrer, country, browser, and device type in aggregate. It sets no cookies, uses no localStorage, and does not store your IP address — the IP is hashed client-side and discarded. No cross-site or cross-session profile is built about you.

Search queries are evaluated entirely in your browser against a locally-loaded index. They are not transmitted to us.

• Analytics or audience-measurement cookies of any kind (the page-view counter described above is cookieless).
• Marketing or advertising cookies.
• Cross-site tracking pixels.
• Account registrations, sign-ups, or contact-form submissions (no such forms exist on this site).
• Newsletter subscription data on this domain.
• Behavioural profiles or automated decisions about you (Art. 22 GDPR).
• Article-level engagement (likes, votes, comments) — the feedback feature has been removed.

Server access logs

Art. 6(1)(f) GDPR — our legitimate interest in providing a secure and reliably operating website. The interest is balanced against your interests by retaining the logs only for a short period and never using them for marketing or profiling.

Reading preferences

§25(2) Nr. 2 TTDSG — the storage is strictly necessary to deliver the service you explicitly requested (your selected theme and desk preferences). No consent is required for this kind of functional storage; you may delete it at any time via your browser settings.

Aggregated page views

Art. 6(1)(f) GDPR — our legitimate interest in understanding, on an aggregate level, which articles readers find useful so we can improve the publication. Because the analytics signal sets no cookies and accesses no information stored on your device, §25 TTDSG does not require prior consent. You may object at any time on the basis described under “Your rights” below.

Hosting (Vercel Inc.)

This site is delivered through Vercel Inc. (United States), which acts as our processor under Art. 28 GDPR. A Data Processing Agreement under Art. 28(3) GDPR is in place via Vercel’s standard DPA. Transfers to the United States are covered by the EU-US Data Privacy Framework (Vercel Inc. is DPF-certified, adequacy decision of 10 July 2023) and, where applicable, by Standard Contractual Clauses.

Web Analytics (Vercel Inc.)

Aggregated page-view metrics are collected by Vercel Web Analytics, also operated by Vercel Inc. (United States) as our processor under the same Art. 28 GDPR DPA referenced above. The service is cookieless; no IP address, device identifier, or user-level profile is stored. Transfers to the US rely on the EU-US Data Privacy Framework and, where applicable, on Standard Contractual Clauses.

Typefaces

The fonts used on this site (Fraunces, Source Serif 4, IBM Plex Sans, IBM Plex Mono) are downloaded at build time and served from the same origin as the site itself. Your browser does not contact Google or any third party to fetch the fonts at runtime.

We do not share your data with any third party other than the processor named above.

Server access logs

Retained for up to 30 days by the hosting provider, then deleted. We do not export, copy, or retain logs ourselves beyond troubleshooting periods.

Reading preferences

Persist in your browser’s local storage until you clear them via your browser settings or by clearing site data.

Aggregated page views

Retained by Vercel Web Analytics in aggregate form according to their published retention period. No raw event tied to an individual visitor is stored, so no per-visitor retention applies.

Each article in this publication links out to its original publisher (BleepingComputer, The Hacker News, etc.). Once you follow such a link, the destination site’s privacy policy governs that visit, not ours. We do not pre-fetch external pages on your behalf.

You may exercise the following rights under the GDPR free of charge by contacting us at info@cloudyrion.com:

• Access (Art. 15) — confirmation of whether we process data about you, and a copy of it.
• Rectification (Art. 16) — correction of inaccurate data.
• Erasure (Art. 17) — deletion of your data where the lawful basis no longer applies.
• Restriction (Art. 18) — limit processing in certain cases.
• Data portability (Art. 20) — receive data you provided in a machine-readable format.
• Objection (Art. 21) — object to processing based on legitimate interests, including the access logs above.

Given the minimal nature of the data processed, an access request for this site will typically return only your IP address from the previous 30 days of hosting logs (if still retained).

You have the right to lodge a complaint with a data-protection supervisory authority under Art. 77 GDPR. The supervisory authority for our establishment is:

If we materially change how this site processes data — for example, by introducing a newsletter signup or analytics — we will update this page and bump the date at the top. Past versions are available in the public version history of this site’s source repository.