Your information.
Handled with purpose.

Customer accounts

Account registration stores your name, email, optional organization, consent time and a one-way password hash in the isolated customer portal. Email verification codes expire after 15 minutes. Sign-in uses an opaque, revocable session cookie that is unavailable to browser scripts and expires after 14 days. Portal accounts are separate from DS Production accounts and credentials.

Contact and enquiry forms

We store your submitted details privately and email the configured DeceptionStrike team so they can respond. Form records are removed after 90 days. If email delivery is delayed, the form will say so and the saved request is retried.

Email-verified API access

We use your email to deliver a single-use code. Codes expire after 15 minutes and allow at most five attempts. API keys grant read-only access to published summaries, expire after 30 days and can be revoked. We store a hash of each key, not the key itself. Expired records are removed during daily maintenance.

Threat brief subscriptions

Joining requires email confirmation. Threat brief subscriptions are stored separately from the existing mailing platform. They remain until you unsubscribe using a fresh email verification code on the unsubscribe page. We do not add API applicants or contact-form users to the newsletter.

Analytics

Analytics are disabled for this preview. The existing production Matomo configuration is documented for the eventual migration. We do not load marketing or analytics cookies on /.

External media

Some preserved resources contain links or embeds from services such as YouTube. Loading those services may share connection information with their providers.

Contact

For access, correction or removal requests, email info@myrsecurity.com.