privacy policy.

Who runs this site

This site, snailsploit.com, is operated by Kai Aizen as an independent offensive security researcher. Contact: research@snailsploit.com (general) · press@snailsploit.com (media).

What data we collect

We collect only the minimum needed to keep the site running, understand traffic patterns, and improve content.

Automatic (every visitor)

• Server logs: IP address, user agent, referrer, requested URL, timestamp. Retained by Cloudflare under their standard log retention (24 hours for free-tier analytics, longer for security events).
• Google Tag Manager + Google Analytics 4 (container GTM-KNQQ58JL): aggregate visit counts, pages viewed, approximate location (country/region only), device type, traffic source. Configured with IP anonymization where supported. See Cookies for what's stored client-side.

You provide directly

• Email: when you contact us via research@snailsploit.com, your email and message content are stored in the inbox for as long as the conversation is relevant.

What we do NOT collect

• No accounts, no passwords, no payment data — the site has no login system.
• No third-party advertising trackers (no Meta Pixel, no LinkedIn Insight unless you've explicitly clicked through).
• No cross-site identity profiling.

Why we use this data

• Security and abuse prevention: rate-limiting, bot blocking, DDoS mitigation (Cloudflare).
• Audience understanding: which content resonates, what's broken, where to invest writing time.
• Communication: responding when you email.

Legal basis (GDPR / EU visitors)

Processing relies on legitimate interest (security, analytics) and, where consent is required (analytics in some jurisdictions), the consent you provide via the cookie banner. You can withdraw consent at any time by clearing site data or using your browser's "Do Not Track" / cookie controls.

Your rights

If you're in the EU/UK/California, you have the right to:

• Request a copy of any personal data we hold about you (we hold very little — see above)
• Ask us to delete it
• Object to processing
• Lodge a complaint with your local data protection authority

To exercise any of these, email research@snailsploit.com with the subject line "Data Request" and we'll respond within 30 days.

Third parties we share data with

Service	Purpose	Data
Cloudflare	Hosting, CDN, DDoS protection	IP, request metadata
Google (GTM + GA4)	Site analytics	Aggregate behavior, anonymized IP
Google Fonts	Web font loading	Font request only (per Google's font CDN)

Data retention

Server logs: per Cloudflare's standard retention. Analytics: 14 months (GA4 default). Email correspondence: as long as needed.

International transfers

Cloudflare and Google operate globally; data may be processed in the United States and other countries. Both companies maintain Standard Contractual Clauses for EU data transfers.

Children

This is a security research site and not directed at children under 13. We don't knowingly collect data from children.

Changes to this policy

If this policy changes materially we'll update the date at the top and post a notice on the home page. Continued use after changes means you accept the updated policy.

Contact

For any privacy question or data-rights request: research@snailsploit.com.