Measure what matters. Give readers a real choice.

Controller and contact.

Cybersecurity Under Pressure is an independent publication operated by Antonio González Burgueño, PhD. For privacy questions or requests relating to personal data, contact privacy@cybersecurityunderpressure.com.

For general editorial, collaboration or podcast enquiries, use contact@cybersecurityunderpressure.com.

What we measure.

When you consent to Analytics, the site uses Cloudflare Zaraz and Google Analytics 4 (GA4) to measure page views and a limited set of interactions. Google Analytics 4 is loaded only after the existing Zaraz Consent Management platform reports explicit consent for the Analytics purpose.

The custom events sent by this site through Zaraz are designed not to include names, email addresses, comment contents or form text. They may include technical or content-level fields such as page path, content type, episode slug and title, listened seconds, playback percentage, platform name, link placement and destination host.

Analytics are opt-in.

Analytics tools are assigned to the Analytics purpose in Cloudflare Zaraz Consent Management. They are intended to load only after you accept that purpose. Rejecting analytics does not prevent access to the publication, Analysis pages, podcast pages or community comments.

A first-party Cloudflare Zaraz consent cookie (cf_consent under the current configuration) is used to remember your choice. This preference is necessary to avoid asking for the same decision on every page load.

Participation without an account.

Analysis pages may offer a moderated discussion. No account or email address is required. If you choose to submit a comment, the site stores the name or professional alias you provide, the comment text, the Analysis page, and submission/publication timestamps in Cloudflare D1.

Comments are not published automatically. They enter a moderation queue first. Approved comments are public and display the name or alias supplied by the contributor. Rejected comments are deleted. Pending comments that have not been moderated within 30 days are automatically removed.

The site does not intentionally store a contributor IP address in the comments database. Cloudflare may still process standard connection and request information as part of providing Pages, Functions, D1 and abuse-prevention services.

Cloudflare Turnstile is used to protect comment submissions from automated abuse. Its client script is loaded only after a reader opens the comment form, and the resulting verification token is validated server-side before a submission is accepted. Do not include confidential, customer, personal or sensitive information in a public comment.

Where processing can occur.

Cloudflare provides DNS, Pages delivery, Pages Functions, D1 storage, Turnstile abuse prevention, Zaraz analytics/consent tooling and Email Routing. Cloudflare necessarily processes technical request information to provide these services.

Google Analytics 4, provided by Google, is used only after Analytics consent to measure aggregate use of the publication. Google may process standard connection, device, browser and page/request data necessary to provide the service. Google Signals and advertising-personalisation signals are disabled by the site's GA4 configuration.

The site also loads some presentation resources from external providers, including Google Fonts and certain podcast-platform logo/CDN sources. Those providers may receive standard network metadata required to deliver the requested resource, such as IP address, browser information and request timing.

Messages sent to the contact or privacy addresses are routed by Cloudflare to a managed mailbox. The mailbox provider may process the contents and metadata of correspondence in order to deliver and store those messages.

Links to LinkedIn, podcast platforms and other external services take you away from this site. Once you follow an external link, that service's own privacy terms and controls apply.

Why data is processed.

Analytics: to understand aggregate use of the publication and improve editorial and product decisions. The legal basis for non-essential analytics is your consent, which can be withdrawn at any time through Cookie preferences.

Community comments: to review and, when approved, publish the technical contribution a reader voluntarily submits, and to operate a useful discussion while limiting spam and abuse. Approved comments are retained as part of the public discussion unless they are later removed; rejected comments are deleted and unreviewed pending comments are removed after 30 days.

Correspondence: if you email us, the information you provide is processed to respond to the request you initiated and to manage the resulting correspondence.

Cybersecurity Under Pressure does not routinely export analytics to build persistent individual profiles. Correspondence is kept only as long as reasonably needed to handle the enquiry, maintain necessary records or meet applicable legal obligations.

Questions, withdrawal and data rights.

You can change or withdraw analytics consent at any time using Cookie preferences. You may also contact privacy@cybersecurityunderpressure.com about access, rectification, deletion, restriction, objection or other applicable data-protection rights, including a request relating to a comment you submitted.

If you believe your data-protection rights have not been respected, you can contact the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).