Privacy

Last updated: 28 September 2026

This notice explains what the AltaSec website collects about you, why, and what you can do about it. Analytics only run if you accept them.

Who is responsible

AltaSec is the controller for the personal data described here. You can reach us at contact@alta-sec.com.

Analytics and session recordings (only with your consent)

When you first visit, we ask whether you accept analytics. If you reject, or do not answer, no analytics code is loaded and nothing is sent to our analytics provider.

If you accept, we use PostHog, hosted in the EU (Frankfurt), to understand how people find and use this site, so we can improve it. PostHog then:

• sets cookies and local storage on your device holding a random identifier, so it can recognise your later visits;
• records the pages you view, the links and buttons you click, how you scroll, and when you leave;
• records where you came from: the referring website (for example a search engine or an AI assistant such as ChatGPT or Perplexity) and any campaign tags in the link;
• records your browser, device type, screen size and approximate location (country and city), which PostHog derives from your IP address;
• makes a session recording: a replay of how the page changed while you used it. Text you type into fields is masked and not recorded.

Legal basis: your consent (Article 6(1)(a) GDPR and the Dutch Telecommunications Act, art. 11.7a). You can withdraw it at any time with Cookie settings at the bottom of every page; withdrawing stops all further collection and does not affect what was collected before.

PostHog processes this data on our behalf under a data processing agreement. We keep analytics events for up to 12 months and session recordings for up to 30 days, then they are deleted. We do not sell this data, use it for advertising, or combine it with data from other sources.

Hosting

The site is served through Cloudflare’s network. Like any web server, it has to process your IP address and basic request data to deliver the page to you; this is necessary to run the site (Article 6(1)(f) GDPR, our legitimate interest in running it and protecting it against abuse) and is not used to profile you.

If you email us

If you write to contact@alta-sec.com, we use your message and your contact details only to reply to you and to follow up on your request. We do not add you to a mailing list and we do not share your message with anyone else.

Your rights

You can ask us for access to, correction or deletion of your personal data, restriction of or objection to its processing, and a copy of it in a portable form, by emailing contact@alta-sec.com. You also have the right to lodge a complaint with a data protection authority; in the Netherlands, that is the Autoriteit Persoonsgegevens.

Client engagements

Data we process while testing a client’s AI is covered by the agreements we sign with that client, not by this notice.