Hispion Hispion

Privacy Policy

Last updated:

This Privacy Policy explains how Hispion ("we", "us") collects, uses and protects personal information when you use hispion.com and its services — the Tools Directory, Hispion News, the Hispion Blog, CyberMap, the Audit Center and the API Analyzer (together, the "Services"). By using the Services you agree to the practices described here.

1. Information we collect

Information you give us

  • Account details when you register for the Audit Center or API Analyzer: name, e-mail address, password (stored only as a secure hash) and organisation details.
  • Audit requests: the website addresses you ask us to assess and any information you provide about them.
  • Newsletter sign-ups: your e-mail address and the page you signed up on.
  • Messages and reports sent through our contact, tool-suggestion and vulnerability-report forms.
  • Questions you type into the AI Tool Finder in the directory.

Information collected automatically

  • Technical data such as IP address, browser type, device and operating system, referring pages, pages viewed and the date and time of visits.
  • Security and abuse-prevention data, for example rate-limit counters and failed sign-in attempts.
  • Information from cookies and similar technologies (see section 5).

2. How we use information

  • To provide, operate and improve the Services, including performing security audits you request.
  • To send newsletters you subscribed to (every e-mail contains a one-click unsubscribe link).
  • To respond to your messages, support requests and vulnerability reports.
  • To protect the Services and our users — detecting spam, abuse, fraud and attacks.
  • To understand how the Services are used through aggregated analytics.
  • To display advertising that helps fund our free resources (section 6).
  • To comply with legal obligations.

Where data-protection laws such as the GDPR apply, we process personal data on the basis of: your consent (for example, newsletters and personalised ads); performance of a contract (for example, providing an audit you requested); our legitimate interests in operating, securing and improving the Services; and legal obligations.

4. Sharing of information

We do not sell your personal information. We share it only with service providers who help us run the Services — such as our hosting provider, analytics (StatCounter), advertising (Google AdSense), AI providers used to generate or summarise content (for example Pollinations and Google Gemini; we do not send them your account data), and our internal messaging tools used to receive form submissions — under appropriate confidentiality obligations. We may disclose information where required by law or to protect the rights, property or safety of Hispion, our users or others.

5. Cookies and similar technologies

  • Essential cookies keep you signed in and protect forms against cross-site request forgery.
  • Analytics: we use StatCounter to measure visits in aggregate.
  • Advertising cookies may be set by Google and its partners (section 6).

You can block or delete cookies in your browser settings; some features (such as signing in) may then not work.

6. Advertising

Some pages show ads served by Google AdSense. Google and its partners use cookies to serve ads based on your previous visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings or aboutads.info. Learn more in how Google uses information from sites that use its services. Visitors in the European Economic Area, the UK and Switzerland are asked for consent before personalised ads are shown.

7. AI-assisted content

Some news stories, blog articles, glossary entries and images are created with the help of AI tools and are reviewed by our editors. They are labelled as such. See our editorial policy.

8. Data retention and security

We keep personal information only as long as needed for the purposes above or as required by law — for example, newsletter addresses until you unsubscribe, and audit reports for as long as your account exists. We use technical and organisational measures such as encryption in transit (HTTPS), hashed passwords, access controls and rate limiting. No system is perfectly secure, but we work continuously to protect your data.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent at any time. To exercise these rights, e-mail [email protected]. You may also complain to your local data-protection authority.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal data, contact us and we will delete it.

11. International transfers

Your information may be processed in countries other than your own, including where our hosting and service providers operate. We take appropriate safeguards to keep it protected in line with this policy.

12. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page with a new "last updated" date.

13. Contact

Questions about privacy? E-mail [email protected] or use our contact form. Hispion, Erbil, Kurdistan Region of Iraq.