---
title: Privacy
url: https://alta-sec.com/privacy
description: How the AltaSec website handles your data: what we measure with PostHog analytics (EU), only after you consent, and your rights.
updated: 2026-10-07
language: en
---

# Privacy

This notice explains what the AltaSec website collects about you, why, and what you can do about it. Analytics only run if you accept them.

## Who is responsible

AltaSec is the controller for the personal data described here. You can reach us at [contact@alta-sec.com](mailto:contact@alta-sec.com).

## Analytics and session recordings (only with your consent)

When you first visit, we ask whether you accept analytics. If you reject, or do not answer, no analytics code is loaded and nothing is sent to our analytics provider.

If you accept, we use **PostHog**, hosted in the EU (Frankfurt), to understand how people find and use this site, so we can improve it. PostHog then:

- sets cookies and local storage on your device holding a random identifier, so it can recognise your later visits;
- records the pages you view, the links and buttons you click, how you scroll, and when you leave;
- records where you came from: the referring website (for example a search engine or an AI assistant such as ChatGPT or Perplexity) and any campaign tags in the link;
- records your browser, device type, screen size and approximate location (country and city), which PostHog derives from your IP address;
- makes a session recording: a replay of how the page changed while you used it. Text you type into fields is masked and not recorded.
- records technical data about how the site worked for you: page loading speed, script errors, browser console messages and the timing of network requests, so we can find and fix problems.

Legal basis: your consent (Article 6(1)(a) GDPR and the Dutch Telecommunications Act, art. 11.7a). You can withdraw it at any time with **Cookie settings** at the bottom of every page; withdrawing stops all further collection and does not affect what was collected before.

PostHog processes this data on our behalf under a data processing agreement. We keep analytics events for up to 12 months and session recordings for up to 30 days, then they are deleted. We do not sell this data, use it for advertising, or combine it with data from other sources.

## Hosting

The site is served through Cloudflare’s network. Like any web server, it has to process your IP address and basic request data to deliver the page to you; this is necessary to run the site (Article 6(1)(f) GDPR, our legitimate interest in running it and protecting it against abuse) and is not used to profile you.

## If you email us

If you write to [contact@alta-sec.com](mailto:contact@alta-sec.com), we use your message and your contact details only to reply to you and to follow up on your request. We do not add you to a mailing list and we do not share your message with anyone else.

## Your rights

You can ask us for access to, correction or deletion of your personal data, restriction of or objection to its processing, and a copy of it in a portable form, by emailing [contact@alta-sec.com](mailto:contact@alta-sec.com). You also have the right to lodge a complaint with a data protection authority; in the Netherlands, that is the Autoriteit Persoonsgegevens.

## Client engagements

Data we process while testing a client’s AI is covered by the agreements we sign with that client, not by this notice.

## Contact

Book a call: email contact@alta-sec.com with the subject "AI agent check". Tell us which chatbot or voice agent you want tested, what it does, and in which languages and channels.