Privacy Policy
Last updated: June 2026
Warpstar Offensive Security ("Warpstar", "we", "us") operates the marketing website at warpstar.id. This policy explains what personal data we collect when you visit the site or submit the contact form, how we use it, and your rights over it. We keep this simple because we collect very little.
What We Collect
When you submit our contact form you provide: your name, organisation name, a message or requirements description, and the type of engagement you are interested in. We also automatically collect technical metadata at the time of submission — including your IP address, browser user-agent string, and request timestamp — solely for spam prevention and rate-limiting purposes.
With your consent, we use Google Analytics 4 (traffic measurement) and Google Ads (advertising measurement and remarketing). These tools load only after you accept cookies in our consent banner — see "Cookies & Tracking" below. If you decline, they are not loaded and no analytics or advertising cookies are stored. We do not use session-recording tools, and any other passive browsing data is limited to what Cloudflare logs during normal CDN operation (see "Processing & Storage" below).
How We Use Your Data
Contact form submissions are used exclusively to respond to your enquiry and, where relevant, to prepare a service quote. We do not use your data for marketing, profiling, or any automated decision-making. We do not sell, rent, or share your personal data with third parties for their own commercial purposes.
Processing & Storage
Form submissions are stored in Cloudflare D1, a serverless SQL database operated by Cloudflare, Inc. An email notification containing your submission is sent to our team via Resend (Resend, Inc.). The site itself is hosted on Cloudflare Pages, with all traffic passing through the Cloudflare CDN.
Bot and spam protection on the contact form is provided by Cloudflare Turnstile. Turnstile operates client-side to assess whether a user is human without serving third-party advertising cookies; its data handling is governed by the Cloudflare Privacy Policy.
Where you have consented to analytics and advertising cookies, usage data is processed by Google LLC through Google Analytics and Google Ads, in line with Google’s Privacy Policy. This data is pseudonymous and is not linked to your contact form submission.
Contact form data is stored within the Cloudflare infrastructure. We do not operate separate database servers or third-party CRM systems.
Cookies & Tracking
On your first visit we show a consent banner. Until you accept, we apply Google Consent Mode with analytics and advertising storage set to "denied", so no Google Analytics or Google Ads cookies are written. If you accept, we set first-party cookies for Google Analytics 4 (to measure site usage) and Google Ads (to measure conversions and support remarketing). If you decline, those cookies are not set.
You can change your choice at any time by clearing this site’s cookies and storage in your browser, which will make the banner appear again. Cloudflare Turnstile may also set its own cookies for bot detection on the contact form, as described in the Cloudflare Privacy Policy.
Data Retention
We retain contact form submissions only as long as is reasonably necessary to handle your enquiry and any follow-up engagement process — typically no longer than twelve months after the last correspondence. After that period, submissions are deleted from our database.
Your Rights
You have the right to request a copy of the personal data we hold about you, to request correction of inaccurate data, or to request deletion. To exercise any of these rights, email us at [email protected]. We will respond within a reasonable timeframe.
Contact
For any questions about this privacy policy or how we handle your data, contact us at [email protected].