Privacy Policy

1. About defend.network

defend.network is a free cybersecurity intelligence site that publishes AI-generated daily threat briefings, vulnerability analysis, and a security tools directory.

For privacy-related questions, contact contact@defend.network.

2. Data collected

2.1. Newsletter subscriptions

If you subscribe to the daily briefings, the following data is collected:

• Your email address
• The date you subscribed
• UTM parameters (referring source) if present in the subscription URL

This data is stored by the email service provider, Beehiiv. See Beehiiv's Privacy Policy for details on how subscriber data is handled.

2.2. Analytics (cookieless, no consent required)

Cloudflare Web Analytics is used to measure aggregated site usage. It is privacy-first by design:

• No cookies are set and no identifier is stored on your device
• No IP address is retained and no fingerprinting is performed; visitors are not tracked across sites or days
• What is measured: page views, referrer, country, device type, and page-load performance, all aggregated

The host (Netlify) also serves a cookieless Real User Metrics (Core Web Vitals) script on each page to measure aggregate page-load performance. Like the analytics above, it sets no cookie and stores no per-visitor identifier on your device.

Because no personal data is collected and nothing is stored on your device, no consent banner is required.

2.3. Hosting and server logs

The site is hosted on Netlify, which logs standard request information (IP address, user agent, referrer, timestamp) for operational purposes such as DDoS protection and content delivery. See Netlify's Privacy Policy for details.

2.4. Data not collected

• No account creation is required
• No names, addresses, phone numbers, or other personal identifiers are collected beyond the email address you provide if subscribing
• No third-party advertising or behavioral tracking is used
• No cookies are used for advertising
• No browser fingerprinting is performed
• No data is sold or shared with third parties for marketing

3. How the data is used

Email addresses are used solely to send the daily threat briefings you subscribed to, plus occasional service announcements (for example, if subscription frequency changes). No marketing emails are sent, and email addresses are not shared with third parties.

Aggregated analytics are used to understand which content is useful so that briefing quality can be improved.

4. Your choices

• Access: request a copy of any data held about you
• Correction: ask for inaccurate data to be corrected
• Deletion: request that your data be deleted
• Unsubscribe: every newsletter email contains an unsubscribe link
• Data portability: request your data in a machine-readable format

To exercise any of these, email contact@defend.network.

5. Cookies and similar technologies

This site sets no cookies. Analytics are provided by Cloudflare Web Analytics, which works without cookies, localStorage, or any client-side identifier. (If you visited before June 2026, a leftover dn_cookie_consent entry from the old consent banner may remain in your browser's localStorage; it is unused and can be cleared at any time.)

No marketing cookies, advertising cookies, or social media tracking pixels are used.

6. Data retention

• Newsletter subscribers: retained until you unsubscribe
• Analytics data: aggregated, cookieless metrics retained by Cloudflare Web Analytics; no per-visitor records exist
• Server logs: retained per Netlify's standard policy (typically 30 days)

7. International data transfers

The service providers (Beehiiv, Netlify, Cloudflare) may process data in the United States and other countries. They have safeguards in place (Standard Contractual Clauses, EU-US Data Privacy Framework) for transfers from the EU.

8. Children

defend.network is intended for cybersecurity professionals and adults. Data is not knowingly collected from children under 16. If you believe a child has subscribed, email contact@defend.network and the data will be deleted.

9. Security

Standard security practices are in place: HTTPS for all traffic, HTTP Strict Transport Security (HSTS), Content Security Policy headers, and no credentials or sensitive personal data are stored. Subscriber emails are stored by Beehiiv, which maintains SOC 2 Type II compliance.

10. Changes to this policy

This policy may be updated occasionally. Material changes will be noted in a daily briefing, and the "Last updated" date at the top of this page will change.

11. Contact

For privacy questions, data requests, or anything else: contact@defend.network.