Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains how CyberStrategiX ("we", "us", "our") collects, uses, shares and protects information when you visit cyberstrategix.in (the "Site"). We aim to comply with the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), India's Digital Personal Data Protection Act, 2023 (DPDP Act), and other applicable privacy laws.

1. Information we collect

Information you give us

• Newsletter email address — only if you choose to subscribe.
• Email you type into the free Breach Checker tool — this is sent directly to a third-party breach-lookup service to perform the check. We do not store it on our servers.
• Messages you send us via our contact form or at support@cyberstrategix.in. The contact form delivers your message to us by email so we can reply; we keep what you send only to respond.

Information collected automatically

• Server logs kept by our hosting provider may include your IP address, browser type, referring page and timestamps, used for security and to keep the Site running.
• Local storage in your browser — we save your learning progress, quiz scores and your cookie preference on your own device. This data stays in your browser and is not transmitted to us.
• Analytics — if you consent, we may use Google Analytics to understand aggregate, non-identifying usage (see Third parties and Cookies).

We do not knowingly collect sensitive personal data, and we do not sell your personal information.

2. How we use information

• To operate, secure and improve the Site.
• To send the newsletter you requested (you can unsubscribe at any time).
• To run the interactive tools you choose to use.
• To understand aggregate usage and improve content (analytics, with consent).
• To comply with legal obligations and protect against fraud or abuse.

3. Third-party services

The Site pulls live data from, embeds, or links to third parties. When you use those features your browser communicates directly with them, and they may process your IP address and usage under their own privacy policies:

• News feeds via rss2json — rss2json.com
• Vulnerability data from the NIST National Vulnerability Database — nvd.nist.gov
• Job listings from Jobicy, Remotive, Arbeitnow and Adzuna
• Breach lookups via XposedOrNot — xposedornot.com
• Affiliate links to Amazon (Amazon Associates) — see our Disclaimer & Affiliate Disclosure
• Web fonts from Google Fonts and video embeds from YouTube — Google Privacy Policy
• Analytics (with consent) from Google Analytics

We do not control these third parties and are not responsible for their practices. Please review their policies.

4. Cookies and local storage

We use a small number of essential and functional storage items, and — only with your consent — analytics. Embedded YouTube content and Google Fonts may set their own cookies. Full details, including how to manage your choices, are in our Cookie Policy.

5. Legal bases for processing (GDPR)

• Consent — for the newsletter and for analytics/non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — for keeping the Site secure, preventing abuse, and basic operation.
• Legal obligation — where we must retain or disclose data by law.

6. Your rights

Depending on where you live, you may have the right to:

• GDPR (EU/UK): access, rectify, erase, restrict or object to processing, data portability, withdraw consent, and lodge a complaint with your data protection authority.
• CCPA/CPRA (California): know what we collect, request deletion or correction, and opt out of "sale" or "sharing" of personal information (we do not sell or share it), without discrimination for exercising your rights.
• DPDP Act (India): access, correction and erasure of your personal data, grievance redressal, and to nominate another person to exercise your rights.

To exercise any right, email support@cyberstrategix.in. We will respond within the timeframe required by applicable law.

7. Data retention

We keep newsletter subscriptions until you unsubscribe. Server logs are retained by our host for a limited period for security. Browser local-storage stays on your device until you clear it. Analytics data is retained per the analytics provider's settings.

8. International transfers

Our service providers may process data in other countries. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.

9. Children

The Site is not directed at children under 16 (or the minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. Security

We use HTTPS and reasonable technical measures to protect data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date will change, and significant changes will be highlighted on the Site.

12. Contact

Questions or requests? Email support@cyberstrategix.in. CyberStrategiX is operated from India; a postal address can be provided on request.