Attack Surface Ranked

Privacy Policy

Last updated: 2026-10-01

This policy explains, in plain terms, the small amount of personal data this site handles.

1. Who is responsible

Attack Surface Ranked (attacksurfaceranked.com) is published by Alegria Media and Consulting Ltd. ("we", "us"). We are the controller of the personal data described here. You can reach us through the contact form.

2. What we collect

The site has no user accounts, no payments and no comments. You can read every page and use the score calculator and the comparison tool without giving us any personal data. We handle only the following.

  • Contact form messages. If you write to us, we receive your name, email address, the topic you choose and your message. For a copyright notice we also receive the extra details the form asks for, such as the work concerned, the URL of the material and your electronic signature.
  • Technical data logged by our host. Like any website, our hosting provider automatically records requests: IP address, browser and device details, the pages requested and the time. This is used for security and to keep the site running.
  • Browser storage. The site does not use localStorage, sessionStorage or cookies. The calculator and comparison tool keep your choices in the page address (for example ?v= in the URL), not on your device.
  • Google Fonts. Pages load typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When fonts load, Google receives your IP address and browser details. Google states that it does not set cookies for this service.

The site loads no analytics, advertising or other third-party scripts.

3. Why we use it and our legal basis

Under the GDPR and the UK GDPR, we rely on our legitimate interests to operate and secure the site and to answer the messages you send. Where the law requires consent, we ask for it and you can withdraw it at any time.

4. Who receives it

  • Hosting and infrastructure providers that run the site for us.
  • The form delivery provider that passes contact messages to us, once one is connected.
  • Authorities, where the law requires us to disclose information.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

5. International transfers

Our providers may process data outside your country. Where that happens we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses. We are based in Israel, which the European Commission recognizes as providing an adequate level of protection.

6. How long we keep it

We keep contact messages as long as we need to handle them and then delete them. Server logs are kept for a limited period set by our hosting provider.

7. Your rights

EU and UK. You can ask for access, correction, deletion, restriction of processing and portability, object to processing, withdraw consent, and complain to your local supervisory authority.

California (CCPA/CPRA). You can ask to know what we hold, to delete it and to correct it, and you can opt out of sale or sharing, which we do not do. We will not treat you differently for using these rights.

Israel. Under the Privacy Protection Law you can ask to review the information we hold about you and to have it corrected or deleted.

To use any of these rights, send a message through the contact form and choose "Privacy request".

8. Children

The site is written for security and IT professionals and is not directed to children under 16.

9. Changes to this policy

If what the site does with data changes, we will update this page and the date at the top. See also the Cookie Policy.