Skip to content
GenAI Security Finder

Privacy Policy

Last updated: 2026-10-08

GenAI Security Finder (genaisecurityfinder.com) is published by Alegria Media and Consulting Ltd. ("we"). This policy describes what the site actually does with personal data. The site has no user accounts, no payments and no comments, and the quiz, the side-by-side page and the checklist work without any personal data.

What we collect

We handle personal data in four situations, and only these.

  • Contact form: when you send a message through the contact page, we receive your name, email address, the topic you chose and your message. If you choose the topic Copyright notice, we also receive the work you describe, the URL of the material, your two statements and your electronic signature.
  • Server logs: our hosting provider automatically records technical data for each request, such as IP address, browser type, the pages requested and the time. This is used to operate and secure the site.
  • Checklist storage: if you tick an item on the AI usage policy checklist, your ticks are saved in your browser's localStorage under the key "gsf-checklist-v1". This stays on your device and is never sent to us.
  • Google Fonts: the site loads its typefaces from Google Fonts. When fonts load, your IP address and browser details reach Google, as they do for any request to a web server.

We do not use analytics, advertising, tracking pixels or any other third-party scripts.

Why we use it and our legal basis

Under the GDPR and the UK GDPR, we rely on our legitimate interests in operating and securing the site and in answering the messages people send us. Where the law requires consent for something, we ask for it, and you can withdraw it at any time.

Who we share it with

  • Hosting and infrastructure providers that run the site for us and act on our instructions.
  • The form delivery provider that passes contact form messages to us, once the form is connected.
  • Authorities, where the law requires us to.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

International transfers

The providers we use may process data outside the country where you live. Where that happens, we rely on appropriate safeguards for the transfer.

How long we keep it

We keep contact messages for as long as we need them to handle your request, and then delete them. Server logs are kept for a limited period set by the hosting provider. Checklist ticks stay in your browser until you clear them with the Clear my ticks button or your browser settings.

Your rights

If you are in the EU or the UK, you can ask for access to your data, correction, deletion, restriction of processing, objection to processing and portability, and you can withdraw consent. You can also complain to a supervisory authority.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what we collect, to delete it, to correct it, to opt out of its sale or sharing (which we do not do) and not to be discriminated against for using these rights.

You also have the rights you have under other privacy laws that apply to you.

To use any of these rights, send a message through the contact page with the topic Privacy request.

Children

The site is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

If what the site does with data changes, we update this page and the date at the top. Related pages: Cookie Policy and Terms of Use.