// Privacy

Privacy policy

ThreatFrontier collects only the information needed to operate the publication, respond to readers, measure how articles perform, and fund the site through advertising. This page explains what is collected, who else receives it, and how to opt out. The site is operated for a U.S.-based editorial audience and public timestamps use U.S. Eastern Time.

Information we collect

Information you give us. Newsletter signups store the email address and the edition you selected. Contact form submissions store the message and any details you include in it. We do not ask for payment details, and we do not require an account to read the site.

Information collected automatically. Our servers and CDN record standard request data such as IP address, user agent, referring page, requested URL, and timestamp. IP addresses attached to newsletter and contact submissions are stored as a salted hash rather than in the clear, and are used only for abuse prevention and rate limiting.

Cookies and similar technologies

A cookie is a small file a site stores in your browser. ThreatFrontier itself uses a small number of strictly necessary and functional storage entries: a browser storage key that remembers your light or dark theme preference, and a session cookie that exists only for signed-in editorial staff. Third parties described below set additional cookies and identifiers, including advertising cookies.

Most browsers let you block or delete cookies through their settings. Blocking cookies may change how some parts of the site behave but will not prevent you from reading articles.

Advertising

We serve advertising through Google AdSense. Google and its advertising partners are independent controllers of the data they collect through ad units on this site.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site and other sites on the internet.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to ThreatFrontier and other sites.
• You can opt out of personalized advertising by visiting Google Ads Settings. You can opt out of personalized advertising from many other vendors at aboutads.info/choices or the NAI opt-out tool.
• More detail on how Google uses information from sites that use its services is available at policies.google.com/technologies/partner-sites.

Where advertising is served to readers in the European Economic Area, the United Kingdom, or Switzerland, a consent notice is presented before personalized advertising or non-essential cookies are enabled, and that choice can be changed or withdrawn at any time through the consent control on the site.

Analytics and session measurement

We use a self-hosted Umami analytics instance on our own infrastructure to count page views, referrers, and interactions such as navigation clicks. Umami is configured for privacy-oriented measurement and we do not sell or share this data.

A sampled subset of visits is recorded as an anonymized session replay so we can diagnose layout and navigation problems. Input fields are masked before recording, recordings are capped in length, and they are used only for site diagnostics. If you would prefer not to be included, enabling your browser’s Do Not Track or blocking the analytics domain will stop collection.

How we use information

We use the information above to deliver and secure the site, send the newsletter editions you asked for, answer messages you send us, understand which coverage is useful, detect abuse of public forms, and serve and measure advertising. We do not sell reader data, and we do not use contact or newsletter submissions for advertising targeting.

Sharing

We share data only with service providers required to run the publication: our hosting and database providers, our CDN and security provider, our email delivery provider, and the advertising vendors named above. We may also disclose information where required by law or to protect the integrity of the site.

Retention

Newsletter records are retained until you unsubscribe or ask for deletion. Contact submissions are retained for as long as needed to handle the inquiry and any related editorial correction. Server logs and analytics records are retained on a rolling basis. Advertising vendors apply their own retention periods, described in their policies.

Your rights and choices

You can unsubscribe from the newsletter at any time using the link in any edition. You can also ask us to confirm what data we hold about you, correct it, or delete it. Depending on where you live, you may have rights under the GDPR, the UK GDPR, or U.S. state privacy laws including the CCPA and CPRA, such as the right to access, delete, correct, or opt out of sale or sharing of personal information. ThreatFrontier does not sell personal information as that term is defined under U.S. state privacy laws. Send requests through the contact page and we will respond within the period required by applicable law.

Children

ThreatFrontier is written for security professionals and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our forms, contact us and we will delete it.

Security

We use HTTPS, strict transport security, a restrictive content security policy, access controls, rate limiting, retention limits, and operational review to reduce unnecessary exposure of reader and source information. No system is perfectly secure, so please avoid sending credentials, exploit code, or victim-sensitive material through our public forms.

International transfers

The site is operated from the United States and our providers may process data in the United States and other countries. Where data is transferred out of the European Economic Area or the United Kingdom, our providers rely on transfer mechanisms such as the European Commission’s standard contractual clauses.

Changes and contact

We update this policy when our data practices change and revise the date below when we do. For privacy questions, correction requests, or reports of misuse of site forms, reach the editorial team through the contact page.

Last updated: July 2026.