SysAlbania

Privacy Policy

Last updated: 4 August 2026

This policy explains what SysAlbania collects when you use sysalbania.com, why we collect it, who we share it with, and how you can control it. If anything here is unclear, email [email protected] and we will explain it properly.

Who we are

SysAlbania is a cyber security education platform publishing articles, tutorials, videos and free open-source security tooling. We also provide security services (penetration testing, security audits and IT work) through services.sysalbania.com. The data controller for this site is SysAlbania, contactable at [email protected].

What we collect

Information you give us

  • Account details — name, email address and password (stored hashed, never in plain text) when you register.
  • Contact and enquiry details — anything you type into our contact form, security-check request form, or sponsorship enquiry, including the website address you ask us to review.
  • Comments and submissions — content you post on articles or submit to the CVE tracker.
  • Payment details — if you buy a Pro membership, payment is handled by Stripe. We never see or store your card number.

Information collected automatically

  • Usage data — pages viewed, time on page, referring site, and general interaction data.
  • Device and connection data — browser type, operating system, screen size, language, and IP address.
  • Cookies and similar technologies — described in the next section.

Cookies and similar technologies

A cookie is a small file stored on your device. We use them for three purposes:

  • Strictly necessary — keeping you signed in, remembering your theme, and protecting forms against abuse. The site cannot function without these.
  • Analytics — Google Analytics 4 and Google Tag Manager, to understand which content is useful. This data is aggregated.
  • Advertising — Google AdSense, to fund free access to the site.

You can delete or block cookies in your browser settings at any time. Blocking strictly necessary cookies will stop parts of the site working, such as staying signed in.

Advertising, Google and third-party vendors

We display advertising through Google AdSense. You should know the following:

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet.
  • You may opt out of personalised advertising by visiting Google Ads Settings.
  • You can opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info or Your Online Choices.
  • More detail on how Google uses data from sites that use its services is available at policies.google.com/technologies/partner-sites.

Pro members do not see advertising.

Other services we rely on

  • Google Analytics and Google Tag Manager — usage analytics.
  • Google AdSense — advertising.
  • Stripe — payment processing for memberships.
  • Cloudflare — content delivery, DDoS protection and security filtering.
  • ImageKit — image hosting and optimisation.
  • Google and GitHub — optional sign-in providers, if you choose to use them.

Why we are allowed to use your data

We process personal data on these bases: to perform a contract (running your account and membership), legitimate interests (keeping the site secure, understanding what content works), consent (advertising and analytics cookies, where required by your local law), and legal obligation (keeping records where the law requires it).

How long we keep it

Account data is kept while your account is open, and deleted within 30 days of you closing it. Contact and security-check enquiries are kept for up to 24 months. Analytics data is retained according to Google Analytics' own retention settings. Comments remain until you or we remove them.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can also object to processing based on legitimate interests, and withdraw consent for cookies at any time. Email [email protected] and we will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you may complain to your local data protection authority.

Children

This site is intended for adults and is not directed at children under 13. We do not knowingly collect data from children under 13, and we do not serve personalised advertising to them. If you believe a child has given us personal data, email us and we will delete it.

Security

We serve the site over HTTPS, hash all passwords, offer email-based two-factor authentication on sign-in, and restrict administrative access. No system is perfectly secure, but as a security company we hold ourselves to the standards we write about.

International transfers

Some providers listed above process data outside your country, including in the United States. Where that happens, transfers rely on the safeguards those providers put in place, such as the EU Standard Contractual Clauses.

Changes to this policy

If we change this policy we will update the date at the top. Material changes will be announced on the site.

Contact

Questions about privacy, or a request about your data: [email protected].