Privacy Policy
Last updated: June 2026
Warpstar Offensive Security ("Warpstar", "we", "us") operates the marketing website at warpstar.id. This policy explains what personal data we collect when you visit the site or submit the contact form, how we use it, and your rights over it. We keep this simple because we collect very little.
What We Collect
When you submit our contact form you provide: your name, organisation name, a message or requirements description, and the type of engagement you are interested in. We also automatically collect technical metadata at the time of submission — including your IP address, browser user-agent string, and request timestamp — solely for spam prevention and rate-limiting purposes.
We do not run advertising trackers, analytics platforms, or session-recording tools. We do not collect any data through passive browsing of the site beyond what Cloudflare logs as part of normal CDN operation (see "Hosting & Infrastructure" below).
How We Use Your Data
Contact form submissions are used exclusively to respond to your enquiry and, where relevant, to prepare a service quote. We do not use your data for marketing, profiling, or any automated decision-making. We do not sell, rent, or share your personal data with third parties for their own commercial purposes.
Processing & Storage
Form submissions are stored in Cloudflare D1, a serverless SQL database operated by Cloudflare, Inc. An email notification containing your submission is sent to our team via Resend (Resend, Inc.). The site itself is hosted on Cloudflare Pages, with all traffic passing through the Cloudflare CDN.
Bot and spam protection on the contact form is provided by Cloudflare Turnstile. Turnstile operates client-side to assess whether a user is human without serving third-party advertising cookies; its data handling is governed by the Cloudflare Privacy Policy.
All data is stored within the Cloudflare infrastructure. We do not operate separate database servers or third-party CRM systems.
Cookies & Tracking
This site does not set any first-party tracking or analytics cookies. Cloudflare Turnstile may set its own cookies as part of its bot-detection mechanism; you can review those in the Cloudflare Privacy Policy. No advertising or cross-site tracking cookies are used.
Data Retention
We retain contact form submissions only as long as is reasonably necessary to handle your enquiry and any follow-up engagement process — typically no longer than twelve months after the last correspondence. After that period, submissions are deleted from our database.
Your Rights
You have the right to request a copy of the personal data we hold about you, to request correction of inaccurate data, or to request deletion. To exercise any of these rights, email us at [email protected]. We will respond within a reasonable timeframe.
Contact
For any questions about this privacy policy or how we handle your data, contact us at [email protected].