Privacy Policy

This policy applies to the ThreatLedger website, including public pages, contact forms, newsletter sign-up forms, analytics, and other website interactions. It explains what personal information may be collected through the website, how it is used, when it may be shared, and what rights visitors may have.

ThreatLedger LLC is the controller of personal information collected through the website.

Depending on how a visitor uses the website, ThreatLedger may collect:

• Contact details — such as name, email address, organization, job title, and phone number.
• Inquiry details — the contents of messages submitted through contact forms, email, scheduling requests, or newsletter sign-up forms.
• Business relationship information — if the website is later used to request services, receive proposals, or manage client communications.
• Device and usage information — such as IP address, browser type, operating system, referral source, pages viewed, approximate geolocation, and timestamps.
• Cookie data — from the limited cookies described in the Cookies & Analytics section below.

ThreatLedger does not intend to collect sensitive personal information through the public website except where a visitor voluntarily provides it. Visitors should not submit classified, export-controlled, health, financial-account, government-issued identifier, or other highly sensitive information through public website forms.

ThreatLedger may use personal information collected through the website to:

• Operate, maintain, and secure the website.
• Respond to inquiries, requests, and communications.
• Provide newsletters, alerts, research, or marketing communications where permitted by law.
• Understand site usage, improve content, and evaluate audience engagement.
• Detect fraud, abuse, unauthorized activity, or security incidents.
• Comply with legal obligations and protect legal rights.

If the website later includes gated reports, downloadable products, client portals, or payment features, this policy will be updated before those features go live.

The website is hosted on Cloudflare. To operate and secure the site, Cloudflare sets a small number of strictly necessary cookies — for example, cookies used for bot management, traffic routing, and protection against malicious activity. These essential cookies are required for the website to function and are not used for advertising or cross-site tracking. The website does not use third-party advertising pixels or cross-context behavioral tracking.

To understand how visitors use the site and to improve our content, the website uses Cloudflare Web Analytics. It is a privacy-focused analytics service that does not use cookies to track visitors and does not build cross-site profiles. It collects aggregated usage information such as pages viewed, referral source, approximate location, and device or browser type, to measure site performance and audience engagement.

Because the website uses only strictly necessary cookies and cookieless analytics, it does not display a cookie-consent banner. Should ThreatLedger later introduce non-essential cookies, advertising pixels, or cross-context tracking technologies, it will provide the disclosures or consent mechanisms required by applicable law and update this section to list the specific tools in use.

ThreatLedger may disclose personal information to:

• Service providers that support business operations — including Cloudflare (website hosting, security, and cookieless Web Analytics) and Beehiiv (newsletter sign-up and email delivery), along with any additional providers that may be added.
• Professional advisors — such as legal, accounting, or insurance providers, where reasonably necessary.
• Government authorities, regulators, courts, or law enforcement — where required by law or legal process.
• A successor entity — in connection with a merger, sale, reorganization, or transfer of assets.

ThreatLedger does not sell personal information for money. If the website later uses advertising, retargeting, or cross-context behavioral tracking technologies that could be treated as a “sale” or “sharing” under certain state laws, this policy and the website footer disclosures will be revised before those technologies are deployed.

ThreatLedger retains personal information only for as long as reasonably necessary for the purposes described in this policy — including responding to requests, maintaining business records, securing the website, meeting legal obligations, and resolving disputes. Retention periods may vary by data type and operational need.

ThreatLedger uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No internet transmission or storage system can be guaranteed to be fully secure, so absolute security cannot be promised.

Depending on where a visitor resides, that visitor may have rights to request access to, correction of, deletion of, or portability of personal information, and may have the right to opt out of certain targeted advertising, sale, or sharing activities if those activities occur.

To exercise rights, email privacy@threat-ledger.com with sufficient information for identity verification and request handling. ThreatLedger may need to verify identity before completing a request and may deny or limit requests where permitted by law. Because ThreatLedger operates online and has a direct relationship with requesting visitors, email may be used as the method for submitting privacy requests.

If visitors subscribe to newsletters or updates, ThreatLedger may send emails about articles, research, services, or business developments. Newsletter sign-up and delivery are handled through Beehiiv. Recipients may unsubscribe using the link in any email or by contacting privacy@threat-ledger.com.

The website is intended for business and professional audiences and is not directed to children under 13. ThreatLedger does not knowingly collect personal information from children under 13 through the website.

ThreatLedger operates in the United States. If visitors access the website from outside the United States, their information may be transferred to and processed in the United States, where privacy laws may differ from those in their jurisdiction.

ThreatLedger may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.

Questions about this policy or about how personal information is handled can be sent to: