Data controller and contact
EL MEHDI HAJJAJI operates CyberReflex and is the data controller, as an individual based in Naples, Italy. CyberReflex is not currently a registered company. For privacy requests, write to contact@cyberreflex.com.
What we collect
Your account email and password hash (a random unusable hash for accounts created with Google or GitHub); the provider name, stable account identifier and verified email when you connect a provider; domain names and verification evidence you provide; public observations and incident records for monitored domains; messages you send through the contact form and the source IP used to limit abuse; and limited security and service logs. We do not ask for your mailbox contents or website passwords to run basic monitoring.
Purposes and legal bases
Account access, email verification, domain proof and monitoring are necessary to provide the service you request (GDPR Article 6(1)(b)). We use limited logs, contact-form abuse controls and incident evidence to keep the service reliable and investigate misuse (legitimate interests, Article 6(1)(f)). We may retain information where a specific legal obligation applies (Article 6(1)(c)).
What you need to provide
An email address and password, or a verified email from Google or GitHub, are needed to create an account. If you choose provider sign-in, the provider processes the authentication and CyberReflex keeps the account link, not its access token. Domain control evidence is needed only when you ask us to monitor a domain. Contact-form details are optional, but we need a reply address to answer your message.
Who receives it
Hosting and email providers may process the data needed to deliver this service. We do not sell account or monitoring information. This site currently loads no advertising or analytics tracker. Write to us for the current providers and any applicable international-transfer information.
How long we keep it
Account and monitoring records remain while needed to provide the workspace and preserve its evidence history. Support messages and operational logs are retained as needed for support, security, and applicable obligations. We review deletion requests against those needs and explain any record that cannot immediately be removed.
Your rights
You may request access, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests by emailing contact@cyberreflex.com. You may also complain to a data protection supervisory authority, including the Italian Garante per la protezione dei dati personali. A domain challenge proves technical control at verification time, not legal ownership.
Automated checks
Guardian uses automated checks to surface public technical signals. Its observations and alerts do not themselves make a legal or similarly significant decision about you.