Privacy policy
Last updated: 30 July 2026
Data controller
The data controller is Cybreach Consulting (SARL), SIRET 10179747000016, 177 avenue des Hauts de Saint Aubin, 49100 Angers, France. For any question about your data: contact@cybreach-engine.com.
Principle: minimal collection
This site sets no advertising cookies, uses no third-party marketing trackers and performs no profiling. Fonts are hosted on our own servers: no request is made to Google Fonts or any external foundry during your visit.
Processing activities
1. Contact form
- Data
- Name, email address, message content, IP address
- Purpose
- Responding to your enquiry
- Legal basis
- Legitimate interest (Article 6(1)(f) GDPR): responding to an enquiry you initiated
- Retention
- 24 months from the last exchange
- Recipients
- Cybreach Consulting only, and our transactional email provider
2. Downloading Cybreach Engine
- Data
- Email address, consents given (updates, and commercial communications if ticked), IP address, date
- Purpose
- To inform you about software updates and, if you consented, send you our commercial communications (newsletter, offers)
- Legal basis
- Consent (Article 6(1)(a) GDPR), collected at the time of the request
- Retention
- 24 months, or until you withdraw your consent
- Recipients
- Cybreach Consulting only, and our transactional email provider
3. Audience measurement
- Data
- Pages viewed, referrer, device type, country, with no cookie and no persistent identifier
- Purpose
- Understanding how the site is used in order to improve it
- Legal basis
- Legitimate interest (Article 6(1)(f) GDPR)
- Retention
- 13 months
- Recipients
- Nobody: the tool is hosted on our own infrastructure
Because this audience measurement is anonymous and strictly limited to producing aggregate statistics, it falls under the consent exemption set out by the CNIL. That is why this site displays no cookie banner.
4. Anti-robot protection on forms
- Data
- IP address and technical browser signals, processed by Cloudflare Turnstile
- Purpose
- Preventing automated submission of unwanted messages
- Legal basis
- Legitimate interest (Article 6(1)(f) GDPR): service security
- Retention
- Not retained by us; see Cloudflare’s own policy
This mechanism only triggers from the second submission onwards from a given IP address. On a first submission, no data is sent to Cloudflare.
Processors and transfers outside the European Union
We rely on the following providers, which may process data outside the European Union:
- Resend
- Transactional email delivery (United States). Transfer safeguard: European Commission standard contractual clauses.
- Cloudflare
- Turnstile anti-robot protection (United States). Transfer safeguard: standard contractual clauses.
- IONOS
- Website hosting (France): no transfer outside the EU.
Security
The site is served exclusively over HTTPS. Messages received through the forms are stored on our server, in a location whose access is restricted to authorised staff. The forms are protected against automated and abusive submissions.
Your rights
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, object to and port your data. You may also withdraw your consent at any time where processing relies on it.
To exercise these rights, write to contact@cybreach-engine.com. We respond within one month at the latest.
If you consider that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the CNIL, the French supervisory authority.
The Cybreach Engine software
Cybreach Engine installs and runs on your own infrastructure. The data you enter (projects, vulnerabilities, clients, reports) stays entirely with you. Cybreach Consulting has no access to it and collects no usage data from installed instances. This policy covers only the cybreach-engine.com website.
Changes
This policy may be updated to reflect changes to the site or to the applicable regulations. The date of the last update appears at the top of this page.