Privacy
Plain-English privacy
This site is built by a security practitioner for security practitioners, so this page is written the way we'd want to read it: short, specific, no theater.
What we collect, and when
- Nothing, if you just read. The guides and tools run without accounts. The interactive tools (Readiness Score, Scapegoat Score) compute entirely in your browser; answers are never transmitted or stored.
- Your email, if you request the template or subscribe, plus the page you signed up from and your country (from the request itself).
- Your profile, if you join the Network: the fields on the form: name, email, optional LinkedIn, title band, company stage, target seat, comp band, timeline, and anything you write in the notes.
- Recruiter briefs, if you submit a search: name, work email, firm, and the brief.
- Membership records, if you subscribe: the email, name, and subscription status our payment provider (Lemon Squeezy) sends us by webhook. We never receive or store your card details.
Where it lives
In Cloudflare KV (encrypted at rest, access-controlled), in the site operator's Cloudflare account. Profiles are never rendered on any page of this site. There is no public directory, no member search, and no API that returns profile data.
Who sees Network profiles
The site operator, for review and matching. Vetted recruiters see matched profiles in anonymized form only: title band, stage, vertical, comp band, timeline. Your name, employer, and contact details are shared only after you approve that specific introduction. Other members can never see you. Nothing is ever sold, rented, or shared with advertisers.
Deletion
Email hello@cisoprep.com from the address you signed up with and say "delete me". Everything tied to that address (subscription, profile, or brief) is deleted, with confirmation, within 72 hours. Unsubscribing from emails is one click in any email.
Analytics and cookies
No advertising trackers and no cookies for reading the site. We use Cloudflare Web Analytics, which is cookieless and aggregate: page counts and performance timings, no individual visitor profiles, no cross-site tracking, nothing stored on your device. The interactive tools also increment an anonymous daily completion counter (literally "N people finished the quiz today"): no identifiers, and never your answers.
Payments
Purchases are processed by our payment provider (Lemon Squeezy); card details never touch this site's infrastructure.
Questions or something that doesn't look right: hello@cisoprep.com. Last updated July 2026.