Privacy notice.
This notice covers causalsecurity.com, the website. It is short because the site collects little. The Cipher product is governed by engagement contracts, and will carry its own notice when the app opens up.
Effective July 2026
who we are
This site is operated by Causal Security, Inc. For anything on this page, write to hello at this domain.
what this site collects
We use Plausible, a cookieless, EU-hosted analytics service, to count visits in aggregate: pages viewed, referrers, country, and device class. It sets no cookies, stores no identifiers on your device, and cannot follow you across sites. We see totals, not people.
We set no cookies for tracking or analytics. Cloudflare, which serves this site, may set short-lived security cookies while screening automated traffic. Those exist to keep the site up, nothing else.
This is also why there is no cookie banner here: there is nothing to consent to.
when you contact us
If you write to us or use the contact form, we keep the correspondence and use it to respond to you. It is emailed to us, not stored in a marketing database, and never sold or shared. The form is protected by Cloudflare Turnstile, which checks that a request is human without tracking you across sites.
If you book a call, scheduling happens on Google's booking page under Google's privacy policy.
client engagements
Data we touch during a security engagement is governed by the engagement contract, not this page. How we handle it is described in trust & security.
your rights
Ask us what we hold about you, ask us to correct it, or ask us to delete it: hello at this domain. Since analytics is aggregate, what we hold is usually just whatever you have sent us.