Privacy Policy
This privacy policy describes how AI Privacy Report (https://aiprivacy.report) collects, uses, and protects information about visitors and subscribers. Operated as part of the AI Sec Network. For questions, contact [email protected].
Information we collect
Automatically collected (analytics)
We use privacy-respecting analytics (Plausible) which does not set cookies and does not track individuals across sites. We collect aggregate traffic data: pages viewed, referrer source, browser type, country (not city), and screen size. We do not collect or store IP addresses.
Voluntarily provided (newsletter)
If you subscribe to our newsletter, we collect: email address, the cluster preferences you selected, the source page you signed up from, and the timestamp. This data is stored in our database (Cloudflare D1) and synchronized to our email provider (MailerLite) for delivery.
Voluntarily provided (newsletter via direct embed)
Some sites in our network may embed newsletter signup forms directly. These submit to the same backend as the central subscribe page and are subject to the same data handling.
Cookies
We do not use tracking cookies. We may set a small functional cookie if you opt to dismiss a newsletter banner — this expires after 30 days and contains no identifying information.
How we use information
- To deliver the newsletter you subscribed to
- To improve our content based on aggregate traffic patterns
- To detect and prevent abuse (rate-limiting, spam detection)
- To respond to inquiries you send us
We do not sell, share, or rent your personal data to third parties for marketing purposes. We do not use your data to train AI models. We do not run behavioral advertising.
Service providers
We use the following processors to deliver this site and our newsletter:
- Cloudflare (CDN, hosting, edge functions) — privacy policy
- MailerLite (newsletter delivery) — privacy policy
- Plausible (privacy-respecting analytics) — privacy policy
- Giscus (comment system via GitHub Discussions) — privacy policy
Third-Party Services
Email Newsletter
We use MailerLite to send newsletters and email updates. If you subscribe, your email address and any information you provide will be processed by MailerLite in accordance with their Privacy Policy. You may unsubscribe at any time via the link in any email.
Comments
Comment functionality is powered by Giscus, which uses GitHub Discussions. If you leave a comment, your GitHub account data will be processed by Giscus and GitHub. See the Giscus Privacy Policy and GitHub Privacy Statement for details.
GDPR
If you are located in the European Union, you have rights under GDPR including the right to access, correct, or delete your personal data. To exercise these rights or for privacy inquiries, contact us via the information on our About page.
Your rights
Depending on your jurisdiction, you may have the right to: access the data we hold about you, correct it, delete it, restrict its processing, port it to another service, or object to its processing.
To exercise any of these rights, email [email protected]. We respond within 30 days of a verifiable request.
EU/UK GDPR specifics
For visitors in the EU/EEA and UK: we process your email address on the basis of your consent (newsletter subscription) and our legitimate interest (responding to direct correspondence). You may withdraw consent at any time by unsubscribing or contacting us.
You also have the right to lodge a complaint with your supervisory authority. The list is maintained at edpb.europa.eu.
California CCPA / CPRA specifics
For California residents: we do not sell or share personal information as defined under the CCPA. You have the right to know, delete, correct, and opt-out of any sale (which we do not conduct). Contact [email protected] to exercise these rights.
Children
This site is not directed at children under 13 (under 16 in some jurisdictions). We do not knowingly collect data from minors. If you believe we have, contact us and we will delete it.
Data retention
Newsletter subscriber data is retained for as long as you remain subscribed plus 30 days after unsubscribe (for unsubscribe verification and abuse prevention). Aggregate analytics data is retained for 24 months. Inquiry correspondence is retained for 12 months.
Security
We use HTTPS for all traffic, encrypted storage for subscriber data, and access controls limiting which network operators can read data. We have procedures for breach detection and, if a breach occurs that affects you, will notify you per applicable law (within 72 hours for jurisdictions requiring it).
Changes
We may update this policy. Material changes will be flagged at the top of this page for at least 30 days, and we'll notify newsletter subscribers via the next dispatch.
Contact
Email: [email protected]
Operator: AI Sec Network
This policy is provided as-is for informational purposes and does not constitute legal advice. If you require legal advice, consult counsel.