Privacy
Privacy Policy
This policy sets out what personal information staycybersafe.online collects, why it is collected, how it is stored, and how you can access or delete it. It describes the actual behaviour of this website and is updated whenever that behaviour changes.
Scope and responsibility
This policy applies to the website staycybersafe.online and to the mailing list operated through it. It does not apply to any third-party website that may be linked from it.
StayCyberSafe is a personal project operated by a single individual based in Australia, who is responsible for all decisions about the handling of personal information described here. No other person has access to that information.
- Contact
- contact@staycybersafe.online
- Location
- Australia
Information collected
Personal information is collected only when you voluntarily submit it through the mailing list signup form. There is no other form on this website and no other mechanism by which it collects information about you.
Browsing this website without subscribing does not result in any personal information being collected or stored by the site.
Information collected at signup
| Information | Source | Purpose |
|---|---|---|
| Email address | Entered by you | To send the email updates you requested |
| Date of signup | Recorded automatically | To identify duplicate submissions and establish when consent was given |
Information not collected
This website does not collect or store your IP address, browser User-Agent, referring page, name, location, or any other identifier. IP address and User-Agent were previously recorded alongside signups; collection ceased in August 2026 and existing records have been amended to remove them.
How information is used
Your email address is used for one purpose: to send you the periodic updates you subscribed to receive. It is not used for advertising, profiling, automated decision-making, or any form of behavioural analysis.
You will not receive messages unrelated to the subject matter of this website, and your address will not be used to contact you about anything you did not ask for.
Hosting and service providers
This website is hosted on Cloudflare. As the hosting provider, Cloudflare processes network connection data, including your IP address, in order to route traffic and to protect the site against attacks and abuse. This processing occurs at the infrastructure level, is a necessary function of hosting, and is governed by Cloudflare's own privacy policy.
Cloudflare's analytics products are not enabled for this site, and connection logs are not accessed or used to identify visitors.
Email sent to the contact address above is delivered via Cloudflare Email Routing before reaching its destination inbox.
No email marketing provider is currently used. If one is introduced, this policy will be updated to identify the provider and the location of its data storage before any subscriber information is transferred to it.
Overseas storage
Subscriber records are held in Cloudflare's key–value storage, which is distributed across Cloudflare's global network. As a result, your email address may be stored on servers located outside Australia, including in the United States.
Subscribing to the mailing list constitutes your agreement to this arrangement. Reading this website does not require subscription.
Disclosure to others
Your personal information is not sold, rented, traded, or disclosed to any third party for marketing purposes, and is not used to build or contribute to any advertising or data broking profile.
Information may be disclosed only where disclosure is required by law and cannot lawfully be refused.
Retention
Your email address and signup date are retained until you unsubscribe or request deletion, at which point the record is permanently deleted rather than marked inactive or archived.
No other personal information is held, and therefore no other retention period applies.
Access, correction and deletion
You may make any of the following requests by emailing contact@staycybersafe.online. No reason is required.
- Access — receive a copy of the information held about you.
- Correction — have inaccurate information corrected.
- Deletion — have your record permanently removed.
- Unsubscribe — cease receiving updates. This is actioned as a deletion; no suppression record is retained.
Requests are actioned as promptly as practicable, and ordinarily within seven days. Where a request cannot be met, you will be told why.
Security
The website is served exclusively over HTTPS with HTTP Strict Transport Security enabled, and enforces a content security policy restricting scripts and other resources to this domain.
The subscriber list is accessible only through an authenticated endpoint protected by a secret token, which is not stored in the website's source code.
No system can be guaranteed secure. The principal control applied here is minimisation: the volume of personal information held is deliberately limited to what the mailing list requires.
Security concerns relating to this website may be reported to the contact address above.
Legal basis and complaints
Australia's Privacy Act 1988 (Cth) presently exempts most businesses with an annual turnover of $3 million or less. This website falls within that exemption. Notwithstanding that exemption, this policy and the practices it describes are intended to meet the standard of the Australian Privacy Principles.
If you have a concern about the handling of your personal information, please raise it at the contact address above in the first instance. If your concern is not resolved, it may be directed to the Office of the Australian Information Commissioner.
Changes to this policy
This policy is amended whenever the information handling practices of this website change, and the version and date at the top of this page are updated accordingly.
Where a change materially affects existing subscribers, notice will be sent to the mailing list rather than relying on this page being revisited.