Your privacy

This page explains, in plain English, what information this website collects, why, and what happens to it. We collect as little as we can.

Who we are

This website (sarawolpin.com) is run by Sara Wolpin, who offers cybersecurity consulting as PinSecurity and custom software and AI automation as PinForge. “We” and “us” on this page mean Sara.

What we collect and why

When you use the contact form

• Your name, email address and message, plus your company and “What do you need?” choice if you fill them in. We use these only to read and answer your message.
• Your score from the site’s security games, if you played one. It helps Sara understand where you’re starting from.
• Basic technical details: your browser type, the time you sent the message, and a scrambled (hashed) version of your IP address. We use these to stop spam and abuse, for example limiting how many messages one connection can send in a few minutes. We don’t store your actual IP address.
• If you leave the “Subscribe to Sara’s newsletter” box ticked, we’ll send you a confirmation email, and you’re only added to the newsletter once you confirm.

When you join the newsletter (The PinSecurity Briefing)

• Your email address, your first name if you give it, where on the site you signed up, and when you signed up, confirmed or unsubscribed.
• We use double opt-in: you only start getting emails after you tap the link in the confirmation email.
• Every email has an unsubscribe link, and you can leave at any time with one tap.
• We keep a simple record of which emails were sent to which address, so we can tell whether an email went out or failed.
• Newsletter emails contain a small tracking image and tracked links, so we can see whether an email was opened and which links were clicked. This is linked to your email address, used only to improve the newsletter, never shared, and deleted along with your subscription details if you ask us to delete them. Some email apps load or block images automatically, so these numbers are approximate.

Website analytics

We use Cloudflare Web Analytics to see how many people visit and which pages they read. It doesn’t use cookies, doesn’t collect personal information, and doesn’t follow you to other websites.

Hosting

The site is hosted on Cloudflare. Like any web host, Cloudflare processes standard technical information (such as IP address and browser type) to deliver the pages and protect the site from attacks.

Cookies and your device

This site doesn’t set cookies for visitors. The security games save your points, badges and sound setting in your own browser (local storage) so you can pick up where you left off. That stays on your device and isn’t sent to us. You can clear it at any time in your browser settings.

If you message Sara on WhatsApp, that conversation happens on WhatsApp and is covered by WhatsApp’s own privacy policy.

How it’s stored and who helps us

• Cloudflare hosts the website and stores contact messages, newsletter sign-ups and newsletter open/click records in a private database.
• Resend sends our emails: contact-form messages to Sara’s inbox, newsletter confirmations and the newsletter itself.

Apart from those services, only Sara can see this information. The admin area of the site is protected by Cloudflare Access, so only Sara can sign in to it.

How long we keep it

• Contact messages: kept until Sara deletes them or you ask us to. The hashed IP address stored with a message is kept as long as the message is, and deleted with it.
• Newsletter: kept while you’re subscribed. If you unsubscribe, we keep your address marked as unsubscribed so we don’t email you again. Ask us if you’d like it deleted completely, and your open and click history is deleted with it.
• Anti-spam counters: the hashed connection records used for rate limiting expire after 10 minutes and are cleared out automatically.

We don’t sell or share your information

We never sell, rent or trade your information, and we don’t share it with anyone except the services listed above, which handle it only to run this website for us. We don’t use advertising trackers.

Your rights

You can ask to see the information we hold about you, correct it, or have it deleted. Just send a message through the contact form and say what you’d like. We’ll take care of it promptly. To stop the newsletter, use the unsubscribe link in any email.

Children

This website is meant for businesses and adults. It isn’t aimed at children, and we don’t knowingly collect information from them. If you believe a child has sent us information, contact us and we’ll delete it.

Changes to this policy

If we change how we handle information, we’ll update this page and the “Last updated” date at the top.

Contact

Questions about privacy? Use the contact form, or write to:
Sara Wolpin, PinSecurity
731 East 3rd Street
Brooklyn, NY 11218