Privacy Policy

1. Introduction

Subterfuge is an OSINT (Open Source Intelligence) platform operated by Cipher Cortex Technologies ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use our platform at subterfuge.ciphercortex.com (the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your username, email address, and password (stored in hashed form). We do not require or collect real names, phone numbers, or physical addresses for account creation.

Search Data

When you perform a search, we store the query input (e.g., IP address, domain, email) and the enrichment results returned by our tools. This data is associated with your user account and is used to provide search history, re-run comparisons, and analytics features.

Usage Data

We collect basic usage information including timestamps of searches, API usage counts, and session data necessary for the platform to function. We do not use third-party analytics or tracking services.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To display your search history and enable re-run comparisons
• To generate reports and analytics within your dashboard
• To enforce rate limits and prevent abuse
• To improve the Service and develop new features

4. Data Sources and Enrichment

Subterfuge queries publicly available data sources and free threat intelligence feeds to enrich your searches. These include DNS records, WHOIS databases, certificate transparency logs, public blockchain data, and threat intelligence feeds such as URLhaus, ThreatFox, Spamhaus, and others.

All enrichment is performed server-side. We do not share your search queries with commercial API providers or data brokers. The indicators you search are sent only to the free, public data sources necessary to perform the enrichment.

5. Shared Search Results

When you generate a share link for a search result, the results are made accessible to anyone with the link without requiring authentication. Shared links provide read-only access and do not expose your account information, notes, or other private data. You can generate share links at your discretion and should treat them as you would any sensitive URL.

6. Data Retention

Search results and account data are retained for as long as your account is active. You may request deletion of your account and associated data by contacting us. Upon account deletion, all search history, results, notes, and tags associated with your account will be permanently removed.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), hashed passwords, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Cookies

We use session cookies strictly necessary for authentication and platform functionality. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

9. Third-Party Services

The Service loads front-end libraries (Tailwind CSS, Alpine.js, Chart.js, htmx) from public CDNs. These CDN providers may log access in accordance with their own privacy policies. No user data or search queries are transmitted to these services.

10. Your Rights

You have the right to access, correct, or delete your personal data. You may export your search results at any time using the built-in PDF and CSV export features. To exercise any of these rights or to request account deletion, contact us at the address below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

For questions about this Privacy Policy or to exercise your data rights, contact Cipher Cortex Technologies at privacy@ciphercortex.com.