Privacy policy

1. Introduction

TunaSec z.s. ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website and services.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We may collect the following types of personal data:

• Contact information: Name, email address, phone number when you contact us.
• Technical data: IP address, browser type, device information for security tool functionality.
• Usage data: How you interact with our website and tools.

Tool data and service providers

Password generation and strength checks run in your browser. Quiz answers, NIS2 answers and action plans are stored locally when browser storage is available; tool history stores selected result summaries. These values are not included in product analytics. Shared quiz pages contain only a score, and downloaded plans are created locally.

Network tools send submitted domains, URLs or IP addresses to our server and, as needed, DNS resolvers, Google PageSpeed Insights, HackerTarget, ip-api or AbuseIPDB. Cloudflare Turnstile processes browser and network information for bot verification. A configured shared quota store receives a keyed hash of the client IP and expiring usage counts. Hosting and provider logs may retain request metadata under their own policies.

We use Vercel Analytics for page usage and, when configured, PostHog for coarse tool outcomes, sharing and enquiry clicks. PostHog autocapture, session recordings and exception capture are disabled; event URLs exclude query strings and unknown paths. The analytics service still receives network metadata when a request reaches it. Opening the embedded booking calendar or a provider guide contacts that provider. Email enquiry subjects can include the originating tool name, without the tool result.

4. How We Use Your Data

We use your personal data to:

• Provide and improve our cybersecurity services and tools
• Respond to your inquiries and provide customer support
• Send you relevant information about our services (with consent)
• Comply with legal obligations

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. As a cybersecurity organization, we take data protection seriously and apply industry best practices.

6. Your Rights

Under GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please contact us at info@tunasec.com.

7. Cookies

Tools use local browser storage for progress and selected result summaries. You can clear quiz progress or NIS2 answers using the reset controls, or remove all local data in browser settings. Optional PostHog analytics uses memory rather than persistent cookies. Bot verification and the embedded booking provider may use their own browser storage; their policies apply.

8. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

Email: info@tunasec.com