Privacy Policy

Last updated: 2026-11-05. Effective: 2026-11-05.

Who we are

Cyphlore (the “Site”) is operated by Davood Tavakoli. The Site is hosted at cyphlore.com.

For privacy questions, use the contact page.

The short version

  • We don’t sell your personal data. Ever.
  • We don’t run ad networks or analytics scripts (no AdSense, no DoubleClick, no Facebook Pixel, no Google Analytics). If that ever changes, this policy changes first.
  • The only data we collect is what you give us directly (comments, contact form) and what our servers log by default (IP, user-agent, request path, timestamps).
  • We use Cloudflare for CDN, SSL and security. Cloudflare gives us aggregate traffic totals from its own network logs; no analytics script runs on our pages.
  • We keep what we need, no longer than we need it.

Below is the long version if you want the details.

What we collect

1. Comments

If you leave a comment, we collect what the comment form shows: name, email address, website (optional), and the comment text. Your IP address and user-agent string are also logged (standard WordPress behavior) to help spam detection via Antispam Bee.

If you’ve uploaded a photo to the Gravatar service and your comment email matches, Gravatar may display your profile picture next to your comment. Gravatar is run by Automattic; see automattic.com/privacy.

2. Contact form

If you submit the contact form, we receive your name, email address, optional subject line, and message. Messages are stored in the Site’s admin dashboard, where only we can read them. We retain contact-form messages for up to 2 years (needed to maintain conversation history on correction and partnership threads), then delete them.

3. Server logs

Our web server (Apache) logs each request: timestamp, IP, user-agent, URL, HTTP status, response size, referrer. These logs are rotated daily and kept for 14 days, then deleted. We may consult them to debug errors or investigate abuse.

4. Cloudflare

Cloudflare sits in front of the Site. It sees request headers to serve the correct content and to filter abusive traffic. Cloudflare’s own privacy policy covers this: cloudflare.com/privacypolicy.

Cloudflare’s dashboard shows us aggregate totals (visits, countries, bandwidth) built from those network logs. No analytics script, cookie or fingerprinting is involved.

5. Cookies

See the Cookie Policy for the complete list. The short version: a session cookie if you comment or submit the form, a WordPress login cookie if you ever log in to the admin, and Cloudflare’s __cf_bm and cf_clearance cookies if its bot protection checks your browser. No tracking cookies, no advertising cookies.

What we don’t collect

  • No tracking across other sites.
  • No ad network data collection.
  • No social-media widgets with their own tracking.
  • No “like us on Facebook” buttons that call home.

How we use data

  • To publish and display your comment under the article you commented on.
  • To reply to your contact-form message.
  • To detect and block spam (via Antispam Bee).
  • To debug and secure the Site via server logs.
  • To understand aggregate traffic patterns from Cloudflare’s network totals.

We do not: – Sell your data to anyone. – Share it with marketing partners. – Use it to retarget you on other sites.

Legal basis (GDPR)

If you’re in the EU/UK, the lawful basis we rely on is:

  • Consent — when you voluntarily submit a comment or contact form.
  • Legitimate interests — for server logs, spam filtering, and aggregate analytics.

You can withdraw consent at any time through the contact page (for example, to ask us to delete a comment or a contact-form message).

Your rights

Wherever you live, you can use the contact page to:

  • Request a copy of the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Opt out of future contact.

If you’re in the EU/UK, you also have the right to complain to a supervisory authority, though we hope you’ll reach out to us first.

Children’s privacy

The Site is not directed at children under 13 and does not knowingly collect data from children under 13. If you believe a child has submitted data, tell us through the contact page and we’ll delete it.

Changes

We may update this policy. When we do, we’ll update the “Last updated” date at the top. Material changes get called out at the top of the page for a month.

— Davood Tavakoli, Cyphlore