Website privacy
Security at Depth uses aggregate statistics to improve the publication. We do not use advertising trackers or session recordings.
Website analytics
We use Cloudflare Web Analytics to understand page views, referral sources, broad visitor geography, device and browser categories, and page performance. The service does not use analytics cookies, local storage, or visitor fingerprinting.
Our analytics script does not load when your browser sends a Global Privacy Control or Do Not Track signal. It runs only on the public website; local previews and private drafts are excluded.
Cloudflare currently makes the previous six months of analytics available. Reports may be sampled and do not account for every visit, including visits where the script is blocked.
Read more about Cloudflare Web Analytics and its privacy practices.
Optional analytics and your choice
When enabled on the public site, PostHog analytics runs only after you select Allow analytics. Declining has no effect on access to the site. Use Privacy settings in the footer at any time to change your choice or withdraw permission. Do Not Track and Global Privacy Control override an earlier opt-in. Local builds, deployment previews, private drafts and unrecognized page paths are excluded.
With permission, we collect page visits and exits, article sharing, RSS and author link clicks, referring website hosts, approved short campaign tags, browser and device categories, and screen dimensions. Random browser and session identifiers group events; these are pseudonymous analytics, not a verified count of people. We do not identify you, create person profiles, record sessions, capture arbitrary clicks, or transmit form contents, search queries, URL query strings or fragments. Referral page paths are removed.
Your analytics choice is saved in local storage for 180 days, then requested again. After opt-in, PostHog stores random identifiers and session information in session storage, which lasts for the browser tab's session. It also stores its consent flag locally. Withdrawal stops new optional captures and removes PostHog browser storage. It does not automatically delete events already received. Clearing site data also clears your choice; optional analytics remains off until you agree again.
Our current PostHog plan makes up to seven years of event history available. This reporting window is not a promise that older data is deleted. Withdrawing permission stops new collection; contact Security at Depth about information already received.PostHog's event retention guidance explains the plan-based reporting window.
Analytics events are sent to PostHog's US-hosted service and summarized in Security at Depth's private reporting system. Requests necessarily pass through networking infrastructure; the tracker disables IP geolocation enrichment and does not add your IP address as an event property. Hosting providers may process technical request information to deliver their services. See PostHog's privacy policy for its processing practices. Contact Security at Depth about access, deletion, or other privacy questions; please do not send sensitive information in an initial request.
Hosting and security
Cloudflare delivers and protects this website. It processes technical request data such as IP addresses, requested URLs, timestamps, and network information for those purposes. Disabling our analytics script does not stop the requests needed to load and protect the site.
Browser preferences and search
Your light or dark theme preference is stored in your browser. You can remove it by clearing this site's browser data. Site search runs in your browser using our static search index; search queries are not sent to an external search or analytics provider.
External links and questions
External links take you to websites with their own privacy practices. To ask about this notice, email emil@engenso.com.