Introduction
Welcome to CyberList. We are committed to protecting your privacy and providing transparency about how we handle information when you use our website. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information through our cybersecurity framework directory service.
Information We Collect
Information You Provide
CyberList is designed as a free, public educational resource. We do not require users to create accounts or provide personal information to access our framework library. However, if you choose to contact us or interact with certain features, we may collect:
- Contact information (name, email address) if you reach out to us directly
- Feedback, questions, or comments you submit to us
- Information you provide when requesting assistance with framework assessments
Automatically Collected Information
When you visit CyberList, certain information is automatically collected through standard web technologies:
- Usage Data: Pages viewed, time spent on pages, links clicked, and navigation paths
- Device Information: Browser type, operating system, device type, and screen resolution
- Log Data: IP address, access times, and referring URLs
- Cookies and Similar Technologies: We may use cookies to enhance your browsing experience and analyze site usage
How We Use Your Information
We use the information we collect for the following purposes:
- Provide and Improve Our Service: Deliver framework information and improve the functionality and user experience of CyberList
- Respond to Inquiries: Answer questions, provide support, and respond to feedback
- Analytics and Research: Understand how users interact with our site to improve content and features
- Security and Integrity: Detect, prevent, and address technical issues, fraud, and potential abuse
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
Information Sharing and Disclosure
We respect your privacy and do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our website, conducting analytics, or providing services on our behalf (e.g., hosting providers, analytics services). These providers are contractually obligated to protect your information.
- Legal Requirements: When required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.
- With Your Consent: We may share information with third parties when you have given us explicit permission to do so.
Data Retention
We retain information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we will securely delete or anonymize it.
Cookies and Tracking Technologies
CyberList uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device that help us:
- Remember your preferences and settings
- Understand how you use our site through analytics
- Improve site performance and functionality
You can control cookies through your browser settings. Note that disabling cookies may affect some functionality of the site. Most browsers allow you to refuse cookies or alert you when cookies are being sent.
Third-Party Links and Services
CyberList contains links to external websites and resources, including official framework documentation from government agencies and standards organizations. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any external sites you visit.
Children's Privacy
CyberList is intended for a general audience and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us.
Data Security
We implement reasonable technical and organizational measures to protect the information we collect from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to certain exceptions
- Opt-Out: Opt out of certain data collection practices, such as analytics tracking
- Data Portability: Request a copy of your information in a portable format
To exercise these rights, please contact us using the information provided below. We will respond to your request in accordance with applicable law.
International Users
CyberList is operated from the United States. If you are accessing our site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using CyberList, you consent to the transfer of your information to the United States and other countries where we operate.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If we make material changes to this policy, we will provide additional notice, such as a prominent announcement on our website, before the changes take effect.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
- Email: privacy@cyberlist.org
- Website: CyberList.org
We will make reasonable efforts to respond to your inquiry within 30 days.
Acknowledgment
By using CyberList, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use our website.