1. Our Commitment: Privacy by Design
CyberNavy is built on the principle of minimal data collection. We collect no personally identifiable information (PII) unless you voluntarily provide it via the contact form.
This policy applies to all visitors from all countries, including residents of the European Union (GDPR) and California, USA (CCPA).
2. Data We Do NOT Collect
We do not collect or store:
- Your name, email address, or any personal identifier (except when you submit the contact form)
- Your full IP address (only an anonymized daily hash for rate-limiting the CyberPeace Pledge)
- Browsing behavior or cross-site tracking data
- Payment information (this is a free, non-commercial site)
- Device fingerprints or persistent identifiers
3. Data We Collect (Anonymous Only)
Server Logs
Our hosting provider (O2switch) automatically records standard server access logs including anonymized IP addresses, request dates, pages visited, and browser type. These logs are retained for a maximum of 30 days for security purposes and are not shared with third parties.
CyberPeace Pledge
When you sign the CyberPeace Pledge, we store in a local JSON file: your selected country flag, your world region, a random 8-character seal, the date and time of signature, and an anonymized daily rate-limit token (SHA-256 hash — impossible to reverse to your IP).
No name, email, or full IP address is stored. The pledge is completely anonymous.
Session Cookie
A temporary session cookie (expires when you close your browser) is used solely to prevent duplicate pledge submissions on the same day. It contains no personal data.
4. Cookies
This site uses functional cookies only: a PHP session cookie (cn_sess) for CSRF protection and a language preference cookie (cn_lang). No analytics cookies, no advertising cookies, no third-party trackers (unless you configure Google Analytics in admin).
5. No Third-Party Tracking by Default
By default, this site does not use Google Analytics, Meta Pixel, social share buttons, CDN user tracking, or advertising networks.
6. Your Rights (GDPR — EU/EEA Residents)
Under the GDPR, you have the right to access, erasure, portability, objection, and to lodge a complaint with the CNIL (France): www.cnil.fr
7. Your Rights (CCPA — California Residents)
California residents have the right to know what personal information is collected, request deletion, and opt out of sale. We do not sell, trade, or transfer any personal information.
8. Data Security
All data is hosted on O2switch servers in France (EU). The site uses HTTPS/TLS encryption for all connections.
9. Children's Privacy
This site is intended for adults with an interest in cybersecurity. We do not knowingly collect data from children under 13 (COPPA) or under 16 (GDPR).
10. Contact
For any privacy-related request, please use our Contact page. We will respond within 30 days.