Privacy

The privacy policy is https://cyberstrategyinstitute.com/privacy/. Cyber Strategy Institute Inc. published it, updated October 14, 2026. This page is not a second policy.

For Agency Check:

• Content you send is processed in memory only and is never stored. Retention of that content is 0 days.
• Receipts hold hashes and the outcome only. They are kept up to 90 days.
• Operational logs and security metadata are kept up to 90 days. That includes Cloudflare Workers Logs.
• Analytics Engine keeps per-event usage, security and billing records under a monthly-rotating pseudonym for about 3 months, then they are deleted. Each record has the event type, plane, tool category, outcome, card state, module, error code, reason, key whitespace, ruleset version, service version, and a duration band. It has no content.
• D1 keeps the user row until the account is deleted. That row is a pseudonymous id, which sign-in produced it, the plan, the terms and privacy versions accepted, the creation time, and the last day seen.
• D1 keeps connections until the account is deleted.
• D1 keeps consents until the account is deleted.
• D1 keeps the entitlement until the account is deleted. That row holds the same pseudonymous id, the plan, the product, the status, the billing interval, the current period end, whether cancellation is at the period end, the Stripe customer id, the Stripe subscription id, disputed Stripe subscription ids, and the time the row last changed.
• Revoked agent IDs are kept while the account exists and are deleted with the account.
• The session generation counter is kept with no expiry, including after account deletion, so a cookie from before deletion does not match.
• The intro marker is kept with no expiry, including after account deletion, so a later subscription is not treated as a first Pro subscription. It records the first Pro subscription id and the end of the first calendar month of that subscription, or that this account does not get an intro.
• D1 keeps a salted hash of the network bucket for a new account until that signup window ends, and never longer than 90 days. The network address is not stored.
• D1 keeps an internal note when new accounts or checks jump above a trailing baseline. The note is the day, the count, the baseline, and the time it was written. It is kept up to 90 days and stays on this service.
• Cyber Strategy Institute Inc. reviews logs to improve the services and for security.
• Cyber Strategy Institute Inc. does not sell personal information.
• Your content is not used to train models.

Privacy requests go to policy@cyberstrategyinstitute.com.

Cyber Strategy Institute Inc.
1207 Delaware Ave #3397
Wilmington, DE 19806