Privacy

Privacy policy

We built this site to collect as little as possible. This page lists exactly what we and our service providers collect, why, for how long, and how to use your rights or opt out.

  • Last reviewed

Draft pending legal review

Who we are

AI Defense Stack (this website) publishes this site and is the controller of personal data processed through it. Privacy questions and requests go to [email protected] .

The site is static. We have no user accounts, no comments and no forms that send data to us, and we do not sell personal information for money.

What is switched on today

This list is generated from the site's configuration and data.

  • Analytics (Google Analytics 4): on, and only after you choose Accept.
  • Advertising (Google AdSense): off. No ad tag is loaded.
  • Affiliate links: none today.
  • Newsletter: not offered, so no email addresses are collected for it.

What we collect

  • Hosting logs. Our host, Cloudflare, processes your IP address, request headers, user agent, referrer and time to deliver the site and protect it from abuse. See Cloudflare's privacy policy.
  • Analytics, only if switched on and accepted. Google Analytics 4 receives pages viewed, clicks, referrer, device and browser details, and approximate location derived from your IP address. We configure it with Google signals and ad personalization switched off. Google states that Analytics does not log or store individual IP addresses from visitors in the EU, Switzerland or the UK, and that for other visitors it never associates raw IP addresses with user identifiers and discards them after use.
  • Advertising, only if switched on and accepted. Google AdSense and its partners may store and read identifiers on your device to serve and measure ads, limit repeats and detect fraud.
  • Your choices. Your consent and opt-out settings are saved in your browser's local storage on your device. They are never sent to us.
  • Messages you send us. If you email us, we receive your address and what you write, and use it to reply. Mail sent to [email protected] is forwarded by Cloudflare Email Routing to the mailbox the AI Defense Stack team reads, so Cloudflare handles it as our processor. See Cloudflare's privacy policy.

We do not knowingly collect sensitive personal information and we do not build profiles of individual visitors.

Why we use it

  • To deliver the site and keep it secure (hosting logs).
  • To understand which pages are useful so we can improve them (analytics).
  • To fund the site through labeled advertising (advertising, if switched on).
  • To answer your messages and handle corrections, privacy requests and notices.

Analytics and advertising tags start in a denied state under Google Consent Mode v2. Analytics loads only after you choose Accept, and advertising loads only after you accept advertising. Until you choose, neither runs, wherever you are. Our host, Cloudflare, can also set two strictly necessary security cookies, __cf_bm and cf_clearance, when it checks a visit for bots or asks for a security challenge. The cookie policy lists them.

If your browser sends a Global Privacy Control signal, or you opt out of sale or sharing, advertising stays off even if you accept all. The "Privacy choices" link in every page's footer reopens the controls. See the cookie policy for every cookie and storage entry, and your privacy choices to change settings.

California privacy rights (CPRA)

Categories collected in the last 12 months, when the tags above are on: identifiers (cookie identifiers, IP address), internet or network activity (pages viewed, clicks, referrer) and approximate location derived from IP. We collect them directly from your browser, for the purposes in the section above, and disclose them to service providers (Cloudflare, Google).

Sale and sharing. We do not sell personal information for money. If advertising is switched on and you accept it, ad partners such as Google may collect identifiers and activity data to show you ads based on activity across sites. California law calls that "sharing". You can opt out at any time on our privacy choices page, through the footer link "Privacy choices (Do Not Sell or Share)", or with a Global Privacy Control signal, which we honor as a valid opt-out request for that browser.

Your rights. You can ask us to tell you what personal information we hold about you, to delete or correct it, and not to discriminate against you for using these rights. Send a request to [email protected] . We verify the request, and answer within 45 days (we may extend once by another 45 days and will tell you why). An authorized agent may make a request for you. We do not knowingly collect personal information from anyone under 16.

EEA, UK and Swiss rights (GDPR)

Where the GDPR or the UK GDPR applies, we rely on your consent (Article 6(1)(a)) for analytics and advertising, and on our legitimate interests (Article 6(1)(f)) for security, preventing abuse, operating the site and replying to messages. You can withdraw consent at any time from the footer link "Privacy choices"; withdrawal does not affect earlier processing.

You can ask us for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. Write to [email protected] . You also have the right to complain to your local data protection authority.

How long we keep it

  • Analytics data: 2 months in Google Analytics (we set the shortest retention it offers), and only for visitors who chose Accept.
  • Advertising identifiers: as set by the ad provider; see the cookie policy for durations.
  • Hosting logs: as set by Cloudflare under its policy.
  • Your consent record: 13 months on your device, then we ask again. An opt-out is kept until you clear it.
  • Messages: as long as needed to answer you and keep a record of corrections and requests, then deleted. Cloudflare Email Routing handles forwarded mail under Cloudflare's own policy.

International transfers

Cloudflare (hosting and email forwarding) and Google process data in the United States and other countries. When personal data leaves the EEA, the UK or Switzerland, we rely on the transfer mechanisms those providers describe in their own documentation, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

Children

This site is written for working professionals and is not directed at children under 16.

Outbound links lead to vendor sites, repositories and standards bodies. Their privacy practices are theirs, not ours. Some links may be affiliate links; they are labeled, and the disclosure page explains how.

Changes and contact

We update this policy when what we collect changes. The "Last reviewed" date at the top is the date of the latest edit. For anything about privacy, write to [email protected] , or see the contact page.