Does OpenTrojan track me with cookies or fingerprints?

No. The platform records anonymous events (page, action, timestamp) only. There is no fingerprinting, IP tracking, cookie-based identity or surveillance.

What data is stored for registered users?

Only the identity you provide: an email address, followed entities, digests and investigations you create. Registration is not required to read public intelligence or use the tools.

Privacy Policy — OpenTrojan

1. What we collect (anonymous)

For all visitors: anonymous usage events — page visited, action taken, timestamp — used only to understand which content is useful and to keep the platform stable. These events cannot identify you: no IP address, no fingerprint, no cookie identity, no session profiling.

Optional website analytics via Google Analytics 4 (Measurement ID G-QE1ZH5QMJ6) is loaded only after you accept the cookie banner, and collects aggregate page statistics: page viewed, page title, language, referrer and device category. GA4 sets a first-party anonymous _ga cookie for visit counting only. It does not identify you, does not record your IP address, and tool inputs / file contents are never transmitted to analytics. Remote web fonts are likewise fetched from Google only after you accept; if you reject (or browse without JavaScript), neither analytics nor remote fonts are loaded.

2. What we collect (registered users, optional)

Only what you provide: email address, followed entities, digest settings, saved investigations and feedback. Registration is never required to read intelligence or use the defensive tools.

3. Tools & inputs

Security tools never store raw inputs. Password checks clear the input after each run and persist only an anonymised usage record (tool, risk, score).

4. Advertising & third-party content

This site displays advertisements served by Monetag (nap5k.com, zone 12137489). The ad script loads third-party content and may set cookies or use local storage to measure ad performance and frequency capping. Ad scripts are loaded from nap5k.com and execute in your browser; the ad network may collect anonymous browsing data for ad delivery. We do not control which specific ads are shown and do not have access to the data collected by the ad network. You can block ad scripts via your browser's content blocker (e.g., uBlock Origin) or by disabling JavaScript.

Advertising is limited to visitors outside the EEA, the UK and Switzerland. We do not detect your location: no IP geolocation, no third-party geolocation service, and no inference from language, device or time zone. Instead, a banner lets you declare your own region. If you declare that you are in the EEA / UK / Switzerland, no ad script is loaded on any page and no request is sent to the ad network. That declaration is stored only in your browser's local storage (key ot-eea-declaration) and is never transmitted to us or to any third party. You can change it at any time via “Ad settings” in the footer, or by clearing site data.

Advertising is scoped to business content pages only. No ad script is loaded on the homepage, account and sign-in pages, company pages (about, contact, privacy, terms, transparency, trust center, status) or error pages — those pages make no request to the ad network at all.

5. What we never do

No fingerprinting, IP tracking or surveillance.
No selling or sharing of personal data.
No automated marketing or unsolicited email.

6. Hosting & security

Site and API are served over HTTPS by Cloudflare. Data is stored in Cloudflare D1 and protected with access controls; access to personal records is restricted to platform operations.

7. Contact

Privacy questions: Contact page.