Privacy Policy

Last updated: June 8, 2026

1. Who we are

CYFR Works Inc. ("CYFR," "we," "us") operates the website at cyfr.works. For privacy questions, please contact us (see the button in Section 13).

2. Scope

This policy covers personal data collected through the cyfr.works marketing website. Our software products and services may be governed by separate notices.

3. What we collect

Aggregated analytics: we use Umami, a privacy-focused analytics service, to collect anonymous, aggregated usage statistics — pages viewed, referring source, approximate (country/region-level) location, and device/browser type. Umami does not use cookies, does not store your IP address, and does not create a persistent identifier that tracks you across days or websites.
Information you provide: if you email us or follow links to GitHub, X, or Discord, those interactions are governed by those platforms' own policies.
We do not sell personal data, and we do not use advertising or tracking cookies.

4. Cookies

Our analytics are cookieless — no cookies or similar identifiers are stored on your device for analytics, so no cookie consent banner is required. Umami derives anonymous visit counts without retaining personal data.

5. Legal basis (EEA/UK)

Because our analytics do not store personal data on your device or build a persistent profile, we rely on our legitimate interest (Art. 6(1)(f) GDPR) in understanding aggregate site usage and maintaining security. You may object to this processing at any time (see Section 9).

6. How we use data

To understand site usage in aggregate, improve content and performance, and maintain security. We do not use it for automated decisions that produce legal effects.

7. Sharing

Aggregated analytics are processed by Umami Software, Inc. (Umami Cloud) acting as our processor. Otherwise we disclose data only where required by law or to protect our rights.

8. International transfers

Data may be processed in the United States and other countries. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses.

9. Retention

Aggregated, non-identifying analytics are retained according to our Umami account settings for as long as they remain useful for reporting. Because the data is not tied to an identified individual, it is not personally attributable.

10. Your rights

EEA/UK: you have rights of access, rectification, erasure, restriction, portability, and objection, and you may complain to your supervisory authority. California (CCPA/CPRA): you have rights to know, delete, correct, and to opt out of the "sale" or "sharing" of personal information (we do neither). Note that because our analytics are anonymous and not tied to an identified individual, we may be unable to locate records relating specifically to you. To exercise any right, please contact us.

11. Children

This site is not directed to children under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy from time to time; the "Last updated" date above reflects the latest version.

13. Contact

CYFR Works Inc.

Email us