Privacy & Cookie Policy

SynapseThreat Inc. (“SynapseThreat,” “we,” “us,” or “our”) respects your privacy. This policy explains what data we collect through www.synapsethreat.com (the “Site”), why we collect it, and how we protect it.

1. Information We Collect

Information you provide

When you submit the briefing request form, we collect:

• Name
• Work email address
• Organization name
• Role / job function
• The challenge, customer journey, or environment context you choose to share
• Optional message text

We collect this information solely to respond to your inquiry and evaluate whether our services are a fit for your organization.

Analytics and site usage

We use cookies and similar technologies to collect limited, aggregated analytics about how visitors use the Site, so we can measure engagement and improve usability. The specific cookies and analytics provider we use are listed in Section 3 (Cookies & Tracking Technologies).

Security and abuse prevention

To protect the Site, our customers, and our infrastructure, we automatically process technical data from visitors to detect and prevent fraud, abuse, and automated attacks. We rely on our legitimate interest in security and fraud prevention as the legal basis for this processing (GDPR Article 6(1)(f)), and we do not use this data for advertising. To exercise your privacy rights, including access or erasure, contact [email protected] (see Section 6, Your Rights).

2. How We Use Your Information

• Respond to inquiries: We use form data to follow up on briefing requests, typically within 24 hours.
• Improve the Site: We use analytics data to understand how visitors interact with our content and optimize the experience.
• Security: We use technical data to detect and prevent abuse, fraud, or unauthorized access to the Site.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Cookies & Tracking Technologies

The Site uses a limited number of cookies. Here is a complete list:

Cookie	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique visitors	2 years
_ga_*	Google Analytics	Maintains session state	2 years

We use Google Analytics 4 (GA4) to measure site traffic and engagement. GA4 collects data in an anonymized and aggregated form. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Our typefaces (Manrope, IBM Plex Sans, and Fira Code) are served directly from this Site rather than a third-party font CDN, so no font provider receives your connection data.

The Site is hosted on Cloudflare Pages. Cloudflare may set performance and security cookies. See Cloudflare’s Privacy Policy for details.

4. Data Retention

Briefing request form data is retained for as long as necessary to respond to your inquiry and for a reasonable period afterward for follow-up, typically no longer than 12 months. Analytics data is retained for 14 months (the GA4 default), after which it is automatically deleted.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including encrypted transmission (TLS/HTTPS), role-based access restrictions, and secure hosting infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data (“right to be forgotten”)
• Object to or restrict processing of your data
• Withdraw consent at any time where processing is based on consent
• Data portability: receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To submit a request, email [email protected].

European Economic Area Residents (GDPR)

If you are in the EEA, our legal basis for processing your data is legitimate interest (responding to your inquiry, improving the Site) and, where applicable, your consent. You have the right to lodge a complaint with your local data protection authority.

7. Third-Party Services

The Site uses the following third-party services that may process your data:

• Google Analytics 4: traffic analytics (Google Privacy Policy)
• Cloudflare: hosting, CDN, and security, including the Turnstile verification challenge on the briefing form (Cloudflare Privacy Policy)
• Google Apps Script: briefing form submissions (the form fields you provide, together with your IP address) are relayed to our inbox through a Google Apps Script endpoint operated by us on Google’s infrastructure (Google Privacy Policy)

We do not use any advertising, remarketing, or social media tracking technologies on this Site.

8. Children’s Privacy

The Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, contact us and we will promptly delete it.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

10. Contact

For privacy-related inquiries:

• Email: [email protected]
• General inquiries: [email protected]