Privacy.

Last updated September 14, 2026.

This website is operated by Short Circuit LLC. For privacy questions, use our Contact Us page.

Reading our publications

We count page requests to understand which pages are useful. Aggregate reports include requested public pages, broad referring sources, browser and device categories, language, and approximate country, state/region and city. These counts do not identify unique people. We look up approximate locations on our server using a local database; we do not send your connection address to a geolocation API. VPNs and mobile networks can make these locations inaccurate.

Optional visit analytics

You can allow or decline optional analytics using the website’s privacy choices. Until you allow, we do not create analytics visitor or visit identifiers or collect browser engagement events. We honor Global Privacy Control and Do Not Track signals by keeping optional analytics off.

If you allow, first-party cookies recognize the browser for up to 90 days and group activity into visits separated by 30 minutes of inactivity. We collect public pages visited, approximate active time, article scroll depth, visible sections, link and share actions, form starts, normalized site searches and performance measurements. We do not record your screen, keystrokes, form contents or raw browser error messages. Referring websites are reduced to domains; only registered campaign tags and site-generated article-sharing labels are retained in detail. Sensitive-looking searches are redacted. With analytics consent that includes connection details, we also associate encrypted connection IP addresses and browser user-agent information with the measured visit. This helps authorized administrators recognize repeat browser activity and investigate unwanted traffic. Analytics choices made before connection details were introduced do not automatically enable them.

These measurements help us understand reading paths, returning readership and which content leads to inquiries. An inquiry may be associated with the measured visit using a reference number. Contact names, addresses and message contents are not copied into analytics. We may compare two contact-link labels to see which works better for readers who allow analytics. We do not use advertising trackers or sell this analytics information.

Detailed page and event records are retained for 90 days from collection. Measured visit and optional visit-connection records are retained for 90 days after their last activity. This period supports quarterly traffic comparisons, analysis of returning readership and campaign performance, and investigation of recurring problems. The browser recognition record expires after 90 days without activity. Aggregate reports and inquiry outcome references are retained for up to 397 days. Withdrawing permission clears this browser’s analytics identifiers and removes its retained visit details. Aggregate counts already produced cannot be linked back to the browser and remain. Your allow/decline preference is remembered for 90 days.

Choose “Accept all” to allow both optional analytics and session replay, “Reject optional” to decline both, or “Customize” to choose individually. Neither feature starts before you allow it. Use Privacy choices to change your choices at any time.

Optional session replay

Session replay is a separate, optional choice in the same privacy controls. Allowing basic analytics alone does not enable it. If you also allow replay, we may record a sample of visits to public articles and other informational pages. Playback combines a saved public-page layout with mouse movements, clicks or taps, scrolling, viewport size and menu expansion events. This reconstructs activity on our website; it does not record your screen, other websites or other applications.

Replay excludes the Contact Us page, search results, private previews, administration, forms, editable fields and embedded media. We do not collect typed text, keystrokes, clipboard contents, browser DOM changes, console logs or network contents for replay. Recordings can be linked to the optional measured visit and its broad location, referring source and campaign labels, and authorized administrators can inspect connection details captured with that visit. IP addresses and browser user-agent strings are not embedded in the replay events. Mouse positions and visible page areas are not proof of what someone read or looked at.

We store recordings encrypted on our hosting account, limit access to authorized administrators using recent password and second-factor verification, and do not send them to an external replay provider. The current sample is 100% of eligible replay-consenting visits, with recording limited to 15 minutes per visit. Recordings and their review notes are retained for 90 days from the start of the recording, to compare navigation and usability problems across a quarterly review period. They are excluded from standard website recovery backups. Capture permission expires independently; its expiration stops new capture without shortening an existing recording’s retention period. Consent records needed to document retained recordings are kept until the associated recordings expire or are deleted. Public-page layout copies contain published website content, not visitor-entered content.

You can withdraw replay permission while keeping basic analytics enabled. Uncheck session replay and save your privacy choices. Withdrawal stops capture and deletes retained recordings associated with this browser’s current identifier; declining all optional tracking also removes the retained analytics details described above. Already-created anonymous aggregate analytics remain. Global Privacy Control and Do Not Track keep both optional features off. Clearing browser identifiers can prevent us from recognizing earlier records, which still expire under these retention limits.

Contact inquiries

The contact form collects your name, email address, optional organization, service interest and message so we can respond. Submissions are sent to our existing business inbox through our hosting provider’s mail service. Inquiry correspondence is handled in that business email system. The form does not subscribe you to a mailing list or send an automatic email to the address you provide.

The Contact Us page uses a session cookie to protect form submissions and display confirmation or validation messages. Information entered into a form may be retained temporarily in the encrypted website session so you can correct an error. Session records can also include IP and browser information. These session cookies are separate from the host-only cookies used by our administration area.

Abuse prevention and operations

We keep encrypted connection addresses with requested paths, request times, response status, approximate location, browser and device categories, broad referring sources, referring domains, registered campaign or site-generated sharing labels, and broad automation indicators for up to 90 days from each request to investigate recurring abuse, review traffic patterns across a quarter, and operate access rules. Full addresses are displayed only to administrators with IP-access permission and recent password and second-factor confirmation; other views remain masked. These operational request records are retained separately from the connection details attached to newly consented visit timelines. These server-side request records continue when optional analytics are declined. They let authorized administrators review traffic to a particular page or tracked link. We do not retain raw query strings or unregistered campaign text in these records, and link labels do not establish a visitor’s identity or the app they used.

Short-lived keyed fingerprints help limit repeated requests and duplicate contact submissions. They do not contain the original message or email address. Our hosting provider also processes ordinary server and mail logs under its own operational retention practices. These may include connection addresses, requested pages, browser information and message routing details. Security event and notification records are retained for 90 days. Administrative accounts and other audit records are retained separately to operate and protect the platform. Encrypted website recovery backups are retained for 90 days and omit detailed visitor records, connection addresses and replay data.

Keep initial inquiries high level. Please do not submit passwords, access tokens or confidential technical material; we can arrange an appropriate channel if needed.

Article sharing

Sharing links contain a stable label for the article, destination and button placement, or for a registered promotion. The label is shared by readers using that link; it contains no reader identifier, connection address or contact information. Sharing works even when you decline optional analytics. When analytics are allowed, we record sharing actions and incoming link visits separately. A sharing action does not tell us whether you published a post or which app you chose in your device’s share menu.

External links and location data

Linked websites have their own privacy practices. Share buttons contact an external platform only when you choose to open it. Approximate IP Geolocation by DB-IP uses DB-IP Lite data under CC BY 4.0.

Your information and requests

Use our privacy request form to ask about your information or request access, a copy, correction or deletion. Tell us which request you are making and provide enough context to locate the relevant information. Do not send government identification, passwords or sensitive documents in the initial message. We may need to verify a request before disclosing or changing personal information, and legal or security obligations may limit what we can remove.

If you disagree with our response, use the same contact page and choose Privacy request appeal, with the date or reference of your original request. Applicable rights and response periods depend on your location and the laws that apply. You can also raise concerns with your privacy regulator; Tennessee residents can contact the Tennessee Division of Consumer Affairs.

Privacy, accessibility and content-concern inquiries go to our business inbox and are excluded from sales-inquiry attribution. Optional tracking can be withdrawn immediately through Privacy choices without submitting a form. We do not sell website visitor information, use cross-site advertising trackers or make automated decisions with legal or similarly significant effects about visitors.

Who handles information

Short Circuit LLC operates this site from Tennessee. Our hosting and business email providers handle information needed to host the website and deliver inquiries; authorized team members use it to operate the site and respond. We may disclose information when required by law or necessary to address abuse and protect legal rights. Information is processed through our hosting and email providers and may be handled outside your state or country.

This website is intended for a general audience interested in professional cybersecurity, rather than children. If you believe a child has provided personal information, use the privacy request form so we can review and address it. We will update this notice when our website practices change. A change in this notice does not itself opt you into additional tracking.