Privacy at dcyfr.work

What this page covers

This notice describes what dcyfr.work collects, and who processes it on our behalf. It sits alongside the DCYFR Labs privacy policy, which governs the wider estate.

Read the full DCYFR Labs privacy policy ↗

What we collect

• Request logs — IP address, user agent, and requested path, recorded by our host for security and debugging.
• Aggregate analytics — page views and performance timings, with no cookies and no per-person identifier.

What we do not do

• No advertising, retargeting, or data sales.
• No cross-site tracking and no behavioural profiles.
• No accounts, and no marketing email from this site.

Session recording

dcyfr.work does not run session replay. We do not record your screen.

Processors

• Vercel — Hosting, content delivery, and request logs (IP address, user agent, requested path). Retained about 30 days. Privacy policy ↗
• Vercel Analytics & Speed Insights — Aggregated page-view counts and Core Web Vitals. Cookieless, with no cross-site or per-person tracking. Privacy policy ↗

Your rights

If you are in the EEA, the UK, or a US state with a comprehensive privacy law, you can ask us for a copy of your data, ask us to correct or delete it, or object to processing.

Write to DCYFR Labs ↗ and say which site you are asking about. We aim to reply within 30 days.

US state privacy rights: California, Colorado and Maryland

Some US states give their residents specific rights over personal information. DCYFR Labs may not meet the thresholds that make these laws apply to it, but we honour the rights below for anyone who asks, wherever they live.

California (CCPA, as amended by the CPRA)

If you live in California, you can:

• Know what personal information we collect, use and disclose, and get a copy of it.
• Delete personal information we hold about you.
• Correct personal information that is inaccurate.
• Opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request anyway.
• Limit use of sensitive personal information. We do not collect it.
• Not be treated differently for using any of these rights.

In the last 12 months we collected identifiers (the IP address and browser details our host records), internet activity (pages viewed, performance timings) and approximate location (country). We collect it from you and from your browser, for the purposes described on this page, and keep it for the periods given under Processors.

You can use an authorised agent. We will ask the agent for proof that you authorised them, and we may ask you to confirm your identity with us directly.

Colorado (Colorado Privacy Act)

If you live in Colorado, you can:

• Confirm whether we process your personal data, and get access to it.
• Correct inaccuracies in it.
• Delete it.
• Get a portable copy of it, up to twice a year.
• Opt out of targeted advertising, the sale of personal data, and profiling that leads to legal or similarly significant decisions. We do none of these. If your browser sends a Global Privacy Control signal, we treat it as an opt-out, and you can authorise someone else to opt out for you.

Maryland (Maryland Online Data Privacy Act)

If you live in Maryland, you can:

• Confirm whether we process your personal data, and get access to it.
• Correct inaccuracies in it.
• Delete it.
• Get a portable copy of data you gave us.
• Opt out of targeted advertising, the sale of personal data, and profiling that leads to legal or similarly significant decisions. We do none of these.
• Get a list of the categories of third parties we have disclosed personal data to. The services we use are listed under Processors above.

We limit the personal data we collect to what is reasonably necessary to provide what you ask for, and we do not sell sensitive data.

How to make a request

Write to DCYFR Labs ↗ and say which site and which right you are asking about. We will confirm we received it within 10 business days, and we aim to answer within 30 days. The law allows 45. If we need more time, we will tell you why within the first 45 days and take no more than 45 more.

Appeals. If we decline your request, reply to our decision to appeal it. We will answer in writing within 60 days, or within 45 days if you live in Colorado. If we deny the appeal, we will tell you how to contact your state Attorney General: the Consumer Protection Division in Maryland, or the Colorado Attorney General.

Children

dcyfr.work is not directed to children under 13, and we do not knowingly collect their information.

Changes

We update this notice when the services behind dcyfr.work change. The date at the top is the last revision.