Privacy Policy

Last Updated: January 27, 2026

This privacy policy explains how OnlineSecurityHub.org (“we,” “I,” or “us”) collects, uses, and protects your information. I’m Mefat Shabani, the owner and operator of this website. This policy may be updated periodically, so please check this page for changes.

Information We Collect

Comments

When you leave a comment, we collect the data you provide in the comment form, along with your IP address and browser user agent string for spam detection purposes. Comments may be featured in other areas of the website.

If you use Gravatar, an anonymized hash of your email address may be sent to the Gravatar service to display your profile picture. You can review their privacy policy at https://automattic.com/privacy/. Once your comment is approved, your profile picture becomes publicly visible alongside your comment.

Media Uploads

Uploaded images may contain embedded location data (EXIF GPS). We recommend removing this data before uploading, as other visitors could potentially extract it.

Third-Party Services

We use the following services that may collect data:

  1. Analytics: Google Analytics tracks website usage to help us understand how visitors interact with our content.
  2. Email Collection: Mailchimp collects email addresses when you subscribe to our newsletter.
  3. Payments: Stripe and PayPal process donations. These services have their own privacy policies governing payment data.
  4. Embedded Content: Articles may include embedded content from other websites (videos, images, etc.). These external sites may collect data, use cookies, and track your interaction with their content.

Cookies

We use cookies in the following situations:

  1. Comments: You may opt-in to save your name, email, and website in cookies for convenience when leaving future comments. These cookies last one year.
  2. Login: Temporary cookies verify browser compatibility. Login cookies persist for two days (or two weeks if you select “Remember Me”) and are removed when you log out. Screen display preference cookies last one year.
  3. Content Editing: If you edit or publish an article, a cookie indicating the post ID is stored for one day. 

Data Retention

Comments and associated metadata are retained indefinitely to facilitate automatic approval of follow-up comments. Registered user data is stored until you request deletion.

Data Sharing

Your IP address is included in password reset emails if you request one. We do not sell your personal information to third parties.

Your Rights

You have the right to:
  1. Request an export of all personal data we hold about you, including any data you’ve provided
  2. Request deletion of your personal data (except data required for administrative, legal, or security purposes)
To exercise these rights, or any questions about this privacy policy, please contact me through this form.