Privacy Policy
Our Privacy-First Promise
CyberAssess is built on a privacy-first foundation. We do not collect, store, or process any personal information. This privacy policy explains our minimal data practices and your rights.
What We Don't Collect
Unlike most websites, CyberAssess operates without collecting personal data:
- No account registration - Use our assessments without signing up
- No personal information - We don't ask for names, emails, or contact details
- No assessment data storage - Your responses stay on your device only
- No user tracking - We don't track your behavior across sessions
- No cookies for tracking - Only essential technical cookies (see below)
How Our Assessments Work
Local Storage Only: Your assessment responses are temporarily stored in your browser's local storage (sessionStorage) while you complete an assessment. This data:
- Stays entirely on your device
- Is never transmitted to our servers
- Is automatically deleted when you close your browser
- Cannot be accessed by us or anyone else
No Server Storage: We do not store any assessment responses, scores, or results on our servers.
What We Do Collect (Minimal Technical Data)
We only collect minimal, non-personal technical information necessary for the website to function:
Server Logs (Automatically Collected)
- IP addresses - Temporarily logged for security and performance (deleted after 7 days)
- Browser type and version - To ensure compatibility
- Page requests - To monitor website performance
- Referrer information - To understand how users find our site
Essential Cookies Only
We use only essential technical cookies required for website functionality:
- Session cookies - To maintain your assessment progress during your visit
- Security cookies - To protect against malicious activity
No tracking cookies, advertising cookies, or analytics cookies are used.
Affiliate Links Disclosure
CyberAssess is free because we earn commissions from affiliate links to cybersecurity tools we recommend. When you click our affiliate links:
- We may receive a commission if you make a purchase
- No personal data is shared with affiliate partners by us
- Affiliate partners may have their own privacy policies once you visit their sites
- Our recommendations are based on assessment results, not tracking data
Third-Party Services
Website Hosting
Our website is hosted by Vercel. They may collect standard server logs as described above. We do not share any additional data with hosting providers.
Affiliate Partners
When you click affiliate links, you'll be redirected to third-party websites that have their own privacy policies. We encourage you to read their policies before making purchases.
Your Rights
Since we don't collect personal data, most data protection rights don't apply. However:
- Right to Information - This policy explains our minimal data practices
- Right to Object - You can disable cookies in your browser settings
- Right to Complain - Contact supervisory authorities if you have concerns
Data Security
Even though we collect minimal data, we protect it with:
- Secure HTTPS encryption for all website traffic
- Regular security monitoring and updates
- Limited server log retention (7 days maximum)
- No database of personal information to secure
International Data Transfers
Since we don't collect personal data, international data transfer regulations generally don't apply. Server logs may be processed in USA where our hosting infrastructure is located.
Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Since we don't collect contact information, we can't notify you directly of changes. Please check this page periodically.
Material changes will be announced prominently on our website.
Children's Privacy
CyberAssess is designed for business use and not intended for children under 13. Since we don't collect personal information, we don't knowingly collect data from children.
Legal Basis for Processing (EU/UK Users)
For the minimal data we do process:
- Server logs - Legitimate interest in website security and performance
- Essential cookies - Necessary for website functionality you've requested
Contact Us
Questions about this privacy policy?
Email: privacy@cyberassess.me
Since we don't collect personal data, most privacy requests don't apply. However, we're happy to clarify our practices or address concerns.
Compliance
This policy is designed to comply with:
- EU General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Other applicable privacy laws
Our minimal data collection approach provides strong privacy protection by design.
CyberAssess: Know your security gaps without compromising your privacy.