Privacy Policy
Last reviewed: 27 August 2026. YouTube section added 27 October 2026.
CISO Times is a publication for security professionals. Most of what we publish can be read without giving us anything at all, and this policy describes the narrow set of cases where that is not true.
Who is responsible
CISO Times is the controller of the personal data described here.
Contact: info@cisotimes.com
Reading the site
We do not require an account. There is nothing to register for, and reading an article creates no record tied to you.
Two things happen when a page loads:
- Performance measurement, using Cloudflare Web Analytics. It stores nothing on your device and does not identify you. It records the page, the referring page and timing measurements, in aggregate. We use it to find slow pages.
- Delivery, through Cloudflare, which hosts and serves this site. Serving a web page necessarily involves processing your IP address, and Cloudflare processes it to route the request and to protect the site from attack.
If — and only if — you have agreed to analytics cookies, Google Analytics also loads and sets the cookies listed in the Cookie Policy.
Your consent decision
Your answer to the analytics question is stored in your browser’s local storage
as ct-consent, together with the date you answered. It is never transmitted
to us. We keep no server-side record of who consented.
You can see and change it at the bottom of this page.
The newsletter
The newsletter is not yet operating. The sign-up form on this site is not connected to a mailing platform and no addresses are being collected through it.
When it launches, it will use double opt-in, the consent will be recorded for that purpose alone, and this policy will be updated to name the provider before a single address is collected. We will not repurpose an address given for one reason to do something else with it.
Email you send us
If you write to us, we hold your message and address for as long as it takes to deal with it and to keep a reasonable record of the correspondence. We do not add correspondents to any mailing list.
YouTube
CISO Times publishes explainer videos on its YouTube channel.
How we publish. We upload our videos with our own publishing tool, which uses YouTube API Services. The tool is used only by CISO Times and signs in only to the CISO Times channel. It uploads our videos with their titles, descriptions, thumbnails and captions, and adds them to our playlists. It does not read, collect, store or share data about viewers or any other YouTube user. The only YouTube data it keeps is the ID and link of each video we upload, so that the same video is not uploaded twice. Its sign-in token is kept on our own systems and is not shared with anyone.
Watching our videos. When you watch a CISO Times video on YouTube, YouTube handles your data, not CISO Times. By using YouTube you agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.
Embedded videos. Some older articles embed YouTube videos. When an embedded player loads, it comes from youtube.com, and YouTube may set cookies and receive your IP address and browser details under the Google Privacy Policy.
Revoking access and deletion. Access granted to the publishing tool can be revoked at any time on the Google security settings page. To have the stored video IDs deleted, write to info@cisotimes.com; we delete them within 7 days.
What we do not do
- We do not sell or rent personal data.
- We do not use advertising, profiling or cross-site tracking.
- We do not build reader profiles, and nothing you read here is used to infer anything about you or your organisation.
Legal bases
| Processing | Basis |
|---|---|
| Serving the site and keeping it available | Legitimate interests — operating a website that is requested |
| Cookieless performance measurement | Legitimate interests — maintaining a usable site, with no device storage and no identification |
| Google Analytics cookies | Consent, which you can withdraw at any time |
| Storing your consent decision on your device | Strictly necessary to give effect to the choice you made |
| Answering your email | Legitimate interests — responding to a request you initiated |
Transfers outside the EEA
Cloudflare and Google are United States organisations that may process data outside the EEA, under the standard contractual clauses and their own transfer frameworks. Google Analytics only ever runs with your consent, so if you decline, no analytics data reaches Google. Embedded YouTube players are the exception, described under YouTube.
Retention
| Data | Held for |
|---|---|
| Consent record | On your device only, until you clear it or the policy version changes |
| Cloudflare Web Analytics | Aggregated; no identifiable record is retained by us |
| Google Analytics | Per the cookie lifetimes in the Cookie Policy |
| Correspondence | As long as needed to handle it and keep a record |
Your rights
Under the GDPR you may request access to your personal data, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting what was lawful beforehand.
Write to info@cisotimes.com. We will respond within one month.
Because we hold almost nothing tied to an individual reader, the honest answer to many access requests will be that we hold nothing about you. You may also complain to your national data protection authority.
Children
This is a professional publication and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
We will update this page when what we do changes — not on a schedule. The date at the top is the last review. Where a change affects analytics categories or their purposes, the consent version is raised and you will be asked again rather than being held to a policy you never saw.
Security
To report a vulnerability in this site, see our vulnerability disclosure policy.
Your current choice
Checking…