The Short Version
This site runs on static pages with no user accounts and no login. It uses Google Analytics to see which pages get read, a newsletter signup that forwards your email to MailerLite if you choose to subscribe, and a small amount of browser storage for a couple of on-page preferences. Nothing typed into the interactive tools on this site (password strength checker, and any future security tools) is ever sent anywhere, it's processed entirely in your browser. That's the whole policy in one paragraph. The rest of this page is the detail behind it.
Analytics
This site uses Google Analytics (via the gtag.js script loaded on every page) to understand traffic: which pages get visited, roughly where visitors are located, what device and browser they're using, and how they found the site. Google Analytics sets its own cookies to do this and may collect your IP address as part of that process. This data is aggregated and used to understand what content is useful, not to identify you individually. You can opt out of Google Analytics tracking across the web using Google's own browser opt-out tools, or by using a browser extension that blocks analytics scripts.
Cookies and Local Storage
Beyond what Google Analytics sets, this site uses your browser's local storage (not cookies) for a couple of small conveniences: remembering your preferred voice for the read-aloud feature on articles, and similar per-device UI preferences as they're added. This data stays on your device, is never transmitted anywhere, and can be cleared at any time by clearing your browser's site data for cyberdruid.io.
The Newsletter Signup
If you submit your email through the signup form, it's forwarded to MailerLite, the email service this site uses to send updates, so you can receive them. Your email isn't used for anything beyond that newsletter, isn't sold, and you can unsubscribe at any time using the link in any email you receive.
Interactive Tools
Tools on this site, like the password strength checker, run entirely in your browser using JavaScript. Nothing you type into them is sent to a server, logged, or stored anywhere, including by this site. If a future tool needs to send data somewhere to function, that will be stated clearly on that tool's own page.
Advertising
This site does not currently run display advertising. If that changes, this policy will be updated to disclose what data any ad network collects and how, before ads go live, and a link to that update will be noted on this page. See the Disclosure page for how this site handles monetization generally.
Questions
If you have questions about any of this, reach out through the contact details on the About page.