Privacy Notice

This notice applies to narrative-security.com and communications initiated through it. Narrative Security is an independently operated proof-of-concept project. Questions about privacy or personal information can be sent to contact@narrative-security.com.

The public site is designed to collect as little personal information as practical. Depending on how you interact with it, the following information may be processed:

Public demonstrations use synthetic scenarios or public-source material. They are not intended to receive personal, employer, client, production, regulated, or confidential security data. Do not submit such data through the site or by email.

The request-access link opens your email client; the site does not currently operate a public contact-form database. Your email provider and the recipient email service process that communication under their own terms.

Information is used only where reasonably necessary to operate, secure, evaluate, and communicate about the project.

The public site offers optional Google Analytics measurement. Google Analytics does not load and no analytics data is sent to Google until you select “Accept analytics.” The site does not use Google advertising storage, advertising personalization, or advertising user-data features.

Your analytics choice is stored in your browser under a versioned first-party preference. If you consent, Google Analytics may set _ga cookies used to distinguish visits. You can change or withdraw your choice at any time through the “Analytics preferences” control in the footer; withdrawing consent stops future measurement and removes applicable Google Analytics cookies from this site where technically possible.

Restricted access may require essential authentication cookies or identity-provider tokens. Private dashboard preferences may use browser local storage, but private application routes are not measured by the public Google Analytics integration.

Infrastructure and communications providers may process limited data on the operator’s behalf, including Cloudflare for hosting, delivery, storage, access protection, and security; Google for consented public-site analytics; and email providers for correspondence. Information is not sold or rented.

Information may be disclosed when required by law, to protect rights or safety, to investigate abuse, or as part of a project or business transfer subject to appropriate safeguards.

Information is retained only as long as reasonably necessary for the purpose collected, operational security, dispute resolution, and legal obligations. Inquiry correspondence may be retained while a professional relationship or evaluation remains active; security logs are retained according to provider and operational settings.

Reasonable administrative and technical safeguards are used, including access controls, restricted-route defaults, encrypted transport, and security headers. No internet system can guarantee absolute security.

Subject to applicable law, you may ask whether personal information is held about you and request access, correction, or deletion. You may also withdraw consent where consent is the basis for processing, subject to legal and security exceptions.

Requests should be sent from the email address concerned to contact@narrative-security.com. Identity may need to be verified before a request is completed. You may also contact the privacy regulator with jurisdiction over your location.

Service providers may process information outside your province or country, where it may be subject to local law. The site is intended for professional audiences and is not directed to children under 16.

This notice may be updated as the project changes. Material revisions will be reflected by the effective date and, where appropriate, an additional notice.