What this site does — and deliberately does not do — with your data

Contact, qualification and resource forms

• ✓Forms ask for a work email and the technical facts needed to qualify an engagement — nothing more. The security-briefing resource form asks only for a work email, an optional company name and an optional marketing-updates choice.
• ✓Submitted answers are validated and length-capped, then stored privately in Microsoft Azure so we can provide the requested resource, handle the enquiry and measure how the resource performs. Only the fields the form shows are stored; the application does not intentionally retain your IP address.
• ✓If direct submission is unavailable, the form falls back to a prefilled email that you send yourself — so you always see exactly what is transmitted.
• ✓We use what you submit only to respond to your enquiry, to provide a resource you requested and measure its performance, and to qualify and deliver a potential engagement. You are never added to a marketing list unless you explicitly tick the optional marketing-updates box, which is unticked by default.

The free scanner

The scanner is designed so that we cannot see what you scan:

• ✓Configuration analysis runs locally in your browser. Pasted content is not transmitted, logged or retained by EcoCitizenz.
• ✓Analytics records only that a scan ran and the count of findings by severity — never the content of what you scanned.
• ✓If you download the report, the file is generated in your browser and saved directly to your device.

Analytics

• ✓Analytics runs only when a deployment has an analytics endpoint configured; otherwise nothing is sent anywhere.
• ✓Events are small and typed: the page path, an event name (for example, that a scan completed) and a few non-identifying properties such as counts of findings.
• ✓Events never include credentials, form content or anything you paste into the scanner.
• ✓No advertising cookies, no cross-site tracking and no fingerprinting — here or anywhere else on this site.
• ✓Non-identifying campaign analytics (event name, campaign and allowlisted campaign parameters only) are stored privately for up to 90 days, then deleted automatically.

Campaign attribution

• ✓If you arrive via a campaign link, the site keeps an allowlisted set of campaign parameters — utm_source, utm_medium, utm_campaign, utm_term, utm_content, ref, source — and nothing else from the URL.
• ✓Values are length-capped and held in your browser’s sessionStorage only, which is cleared when the tab closes. No cookie is set for this.
• ✓The stored values are appended to TrustOps checkout links so we can tell which campaign led to a purchase — they identify a campaign, not a person.