Privacy at dcyfr.tech

What this page covers

This notice describes what dcyfr.tech collects, and who processes it on our behalf. It sits alongside the DCYFR Labs privacy policy, which governs the wider estate.

Read the full DCYFR Labs privacy policy ↗

What we collect

• Request logs — IP address, user agent, and requested path, recorded by our host for security and debugging.
• Aggregate analytics — page views and performance timings, with no cookies and no per-person identifier.
• Error reports — the stack trace and browser context when something breaks.

What we do not do

• No advertising, retargeting, or data sales.
• No cross-site tracking and no behavioural profiles.
• No accounts, and no marketing email from this site.

Session recording (Sentry Replay)

We sample roughly 1% of sessions, and record the session around an error when one occurs, so we can reproduce faults we cannot otherwise see.

Recordings are masked at capture: text content and media are replaced before the recording leaves your browser, so what we receive is layout and interaction timing, not the words on your screen. Recordings are stored by Sentry and deleted on their retention schedule.

To opt out entirely, block sentry.io in your browser or use an extension that blocks error-monitoring scripts. The site works without it.

Processors

• Vercel — Hosting, content delivery, and request logs (IP address, user agent, requested path). Retained about 30 days. Privacy policy ↗
• Vercel Analytics & Speed Insights — Aggregated page-view counts and Core Web Vitals. Cookieless, with no cross-site or per-person tracking. Privacy policy ↗
• Sentry — Error and performance monitoring, including Session Replay on a sampled basis. See the section above for what replay records. Privacy policy ↗

Your rights

If you are in the EEA, the UK, or a US state with a comprehensive privacy law, you can ask us for a copy of your data, ask us to correct or delete it, or object to processing.

Write to DCYFR Labs ↗ and say which site you are asking about. We aim to reply within 30 days.

US state privacy rights: California, Colorado and Maryland

Some US states give their residents specific rights over personal information. DCYFR Labs may not meet the thresholds that make these laws apply to it, but we honour the rights below for anyone who asks, wherever they live.

California (CCPA, as amended by the CPRA)

If you live in California, you can:

• Know what personal information we collect, use and disclose, and get a copy of it.
• Delete personal information we hold about you.
• Correct personal information that is inaccurate.
• Opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request anyway.
• Limit use of sensitive personal information. We do not collect it.
• Not be treated differently for using any of these rights.

In the last 12 months we collected identifiers (the IP address and browser details our host records), internet activity (pages viewed, performance timings, error reports and masked session recordings) and approximate location (country). We collect it from you and from your browser, for the purposes described on this page, and keep it for the periods given under Processors.

You can use an authorised agent. We will ask the agent for proof that you authorised them, and we may ask you to confirm your identity with us directly.

Colorado (Colorado Privacy Act)

If you live in Colorado, you can:

• Confirm whether we process your personal data, and get access to it.
• Correct inaccuracies in it.
• Delete it.
• Get a portable copy of it, up to twice a year.
• Opt out of targeted advertising, the sale of personal data, and profiling that leads to legal or similarly significant decisions. We do none of these. If your browser sends a Global Privacy Control signal, we treat it as an opt-out, and you can authorise someone else to opt out for you.

Maryland (Maryland Online Data Privacy Act)

If you live in Maryland, you can:

• Confirm whether we process your personal data, and get access to it.
• Correct inaccuracies in it.
• Delete it.
• Get a portable copy of data you gave us.
• Opt out of targeted advertising, the sale of personal data, and profiling that leads to legal or similarly significant decisions. We do none of these.
• Get a list of the categories of third parties we have disclosed personal data to. The services we use are listed under Processors above.

We limit the personal data we collect to what is reasonably necessary to provide what you ask for, and we do not sell sensitive data.

How to make a request

Write to DCYFR Labs ↗ and say which site and which right you are asking about. We will confirm we received it within 10 business days, and we aim to answer within 30 days. The law allows 45. If we need more time, we will tell you why within the first 45 days and take no more than 45 more.

Appeals. If we decline your request, reply to our decision to appeal it. We will answer in writing within 60 days, or within 45 days if you live in Colorado. If we deny the appeal, we will tell you how to contact your state Attorney General: the Consumer Protection Division in Maryland, or the Colorado Attorney General.

Children

dcyfr.tech is not directed to children under 13, and we do not knowingly collect their information.

Changes

We update this notice when the services behind dcyfr.tech change. The date at the top is the last revision.