Home / Privacy

How we handle your data.

Plain-English summary: we collect the minimum needed to deliver your CPE summary, we never sell or share your data, and you can ask us to delete it anytime.

Last updated: 2026-05-12

Who we are

Simply Cyber is a cybersecurity media and education business operating in South Carolina, USA. We run cyberthreatbrief.simplycyber.io (the "Site"). For privacy or data questions: cpe@simplycyber.io.

What we collect

When you browse the Site: standard server logs (IP address, browser type, requested URL, referrer, timestamp) handled by Cloudflare. Retained ~30 days. Used for security and operational analytics only.

When you submit the CPE attestation form: your full name, email address, the date you attested, and which episode you attested. We also store a one-way hash of your IP address and your user-agent string for fraud prevention.

When you receive email from us: your email address is stored to enable us to send your monthly CPE summary and occasional Simply Cyber announcements (only after you've opted in via the form).

That's it. We do not collect phone numbers, addresses, payment info, certifications held, or anything else.

Why we collect it

To deliver your monthly CPE summary and printable certificate
To prevent duplicate or fraudulent attestations
To occasionally send you Simply Cyber updates relevant to the show or community (only with your explicit opt-in)
To keep the Site reasonably secure and available

Third-party services we use

The following services process some Site data on our behalf. Each has its own privacy policy linked below.

Cloudflare hosts the Site, manages DNS, stores attestation records (D1), and provides bot protection (Turnstile). Cloudflare privacy policy
Resend sends our transactional and announcement emails. Resend privacy policy
YouTube hosts the show videos that are embedded on episode pages. Their cookies and tracking are governed by Google. Google privacy policy
Anthropic Claude processes YouTube transcripts to generate show notes. No user attestation data is ever sent to Anthropic. Anthropic privacy policy

What we do NOT do

We do not sell your data, ever.
We do not share your data with marketers or advertisers.
We do not use third-party advertising trackers (no Google Analytics, no Facebook Pixel, no LinkedIn Insight, none of it).
We do not use your data to train AI models.

Your rights

Regardless of where you live, you can:

Request a copy of all data we have on you. Email cpe@simplycyber.io with subject "Data export".
Request correction of any information.
Request deletion. Email cpe@simplycyber.io with subject "Delete my data".
Opt out of emails at any time by replying with "remove" or emailing the address above.

We typically process requests within 7 days.

Cookies and tracking

We use Cloudflare Turnstile, a privacy-friendly CAPTCHA, on form submissions to block bots. Turnstile uses minimal device fingerprinting and no cross-site tracking. We do not run Google Analytics, Facebook Pixel, or any other tracking pixel or third-party advertising cookie on the Site.

Children

The Site is intended for working cybersecurity professionals and adults pursuing the field. We do not knowingly collect data from anyone under 16. If you believe we have data from a child, email cpe@simplycyber.io and we will remove it.

International users

The Site is operated from the United States. If you access from outside the US, your data is transferred to and stored in the US. By using the Site, you consent to this transfer. EU and UK users may exercise the rights listed above; we honor them globally.

How long we keep your data

Attestation records: kept indefinitely so you can reference your CPE history. Deleted on request.
Email send logs: 12 months for delivery troubleshooting, then deleted.
Server logs: ~30 days (Cloudflare default).

Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent change. Material changes will be noted in the Daily Cyber Threat Brief newsletter and on the live show. Continued use of the Site after a change means you accept the updated policy.

Contact

General inquiries: gerald@simplycyber.io
Privacy or data requests: cpe@simplycyber.io