This policy explains what data null-packet.com collects, why, and what control you have over it. The short version: the site is a cybersecurity blog, not a data business. It collects the minimum needed to serve pages, keep the site secure, and (once approved) show advertising. It does not sell personal information.
Who runs this site
null-packet.com is an independent cybersecurity publication, operated by a small team of IT professionals. It publishes CVE and KEV analysis, Active Directory and identity security write-ups, and practical defensive guides. Related tooling is sold separately at shop.null-packet.com.
What we collect
We do not ask you to create an account, and reading the blog does not require you to submit any personal details. Data is collected in two ways:
- Server and security logs. Like every website, our infrastructure automatically records standard request data, IP address, browser user-agent, referring page, requested URL, and timestamp. This is used to deliver pages, diagnose errors, and detect abuse. The site is served through Cloudflare, which processes this data on our behalf to route traffic and mitigate attacks (see Cloudflare's privacy documentation for details).
- Cookies and similar technologies. A small number of cookies and equivalent identifiers may be set as described below.
Cookies
Cookies are small files a site stores in your browser. This site uses them for two purposes:
- Essential / security. Cloudflare may set cookies needed to keep the site secure and available (for example, to distinguish humans from automated bots). These are required for the site to function.
- Advertising (third-party). Where advertising is shown, ad vendors may set cookies as described in the next section.
You can control or delete cookies through your browser settings. Blocking essential cookies may affect how the site works.
Advertising
This site uses Google AdSense, Google's third-party advertising service, to display advertisements.
- Google, as a third-party vendor, uses cookies to serve ads on this site. Google's use of advertising cookies (including the DoubleClick DART cookie) enables it and its partners to serve ads to you based on your visits to this and other sites on the internet.
- Third-party vendors and ad networks may also use cookies, web beacons, or similar technologies to measure ad performance and to serve ads based on prior visits.
- You can opt out of personalised advertising by visiting Google Ads Settings. You can opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info and, for EU users, youronlinechoices.eu.
For more on how Google uses data when you use our partners' sites or apps, see Google's policy on partner sites.
Analytics
We may use privacy-respecting, aggregate analytics to understand which articles are read, using coarse metrics such as page views and referrers. Where analytics are used, the goal is aggregate traffic understanding, not tracking identifiable individuals across the web.
Affiliate and outbound links
Some articles contain affiliate links (for example, to VPN or security products). If you buy through one, we may earn a commission at no extra cost to you. Affiliate relationships never change our technical assessment, and relevant posts carry a visible disclosure. Outbound links to third-party sites are provided for reference; once you leave null-packet.com, that site's own privacy policy applies.
Data we do not collect
We do not knowingly collect names, email addresses, payment details, or other directly identifying information through the blog, because the blog has no sign-up, comment, or contact form. Purchases are handled entirely by our storefront provider (Gumroad) under its own privacy policy; payment and customer details are processed by that provider, not by this site.
Your rights
Depending on where you live, you may have rights over personal data relating to you, including the right to access, correct, or delete it, and to object to or restrict certain processing. This includes rights under the EU/UK GDPR and, for California residents, the CCPA/CPRA, such as the right to opt out of the "sale" or "sharing" of personal information. Because this site sets no login and collects no direct contact details, most such data (server logs, advertising identifiers) is held by the third-party processors named above; requests about advertising data are best directed to those providers using the opt-out links in the Advertising section.
Children's privacy
This site is intended for a professional, adult audience and is not directed at children under 16. We do not knowingly collect personal information from children.
Data retention and security
Log data is retained only as long as needed for operational, security, and legal purposes, then discarded or aggregated. The site is served over HTTPS, and we rely on reputable providers (Cloudflare, Google, Gumroad) that maintain their own security programmes.
Changes to this policy
We may update this policy as the site evolves or as legal requirements change. Material changes will be reflected by updating the effective date at the top of this page.
Contact
For advertising and cookie data, the fastest route is the opt-out links in the Advertising section above, which reach the third-party providers that hold that data. For any other privacy question, email support@null-packet.com or use our contact page.