Skip to content
Bulwark Black Bulwark Black
Latest
Ghost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware FuelOusaban Shows Banking Trojans Are Learning to Hide From SandboxesNUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch QueueARToken Shows Microsoft 365 Tokens Are the New BEC Control Plane

Privacy

What we collect. Plain English.

Last updated: May 20, 2026

I run this site myself. I keep what you submit on a server I own, I read every message personally, and I do not sell, share, or trade your information. If you ever want your data removed, email me and I will delete it.

Who runs this site

Bulwark Black LLC. Registered in Spokane, WA. Owner-operator: Albert LaScola. Questions about your data go to support@bulwarkblack.com.

What I collect, and when

  • Browsing. Standard web-server logs only. IP address, user agent, requested URL, and timestamp. Used for security and debugging. No analytics scripts, no advertising pixels, no third-party trackers run on this site.
  • Newsletter signup. Just your email address.
  • Reviews. Display name, email, location, relationship to the work, star rating, and the review text. Your email is used to verify the review is real and is never published.
  • Apply / Contact / Capability Statement forms. Whatever you choose to write into the form, plus your name, email, and any optional fields you fill in (phone, organization, location, budget range).
  • Booking a call. Handled by Calendly. They collect your name, email, the call details, and (for paid calls) payment information via Stripe. See their policies linked below.

Where it goes

  • My server. Reviews, newsletter signups, and form submissions are stored in a self-hosted PostgreSQL database on a server I administer personally. No third-party CRM, no marketing platform.
  • Resend. I use Resend to send transactional emails (form confirmations, review approval notices to me). Resend processes the email address and message contents in transit. See resend.com/legal/privacy-policy.
  • Calendly + Stripe. Booking a paid advisory call sends your contact and payment info to Calendly and Stripe respectively. See calendly.com and stripe.com.
  • Email. The mailbox at support@bulwarkblack.com runs on a server I operate. If you email me, the message lives in that mailbox until I delete it.

Cookies

This site does not set tracking or advertising cookies. The booking widget at Calendly may set its own cookies when you book a call. That is governed by Calendly's policy.

How long I keep it

  • · Web-server logs: 30 days, then rotated out.
  • · Newsletter signups: until you unsubscribe.
  • · Reviews: indefinitely (the published ones are the point of the page); rejected reviews are deleted on request.
  • · Form submissions: until the engagement closes, then archived for tax / business-records purposes per Washington State requirements (generally 7 years).

Your rights

You can ask me to show you what I have on you, correct it, or delete it. I will respond within 30 days. Email support@bulwarkblack.com with "Privacy request" in the subject line.

If you are in California (CCPA) or the EU/UK (GDPR), you have additional rights to know what is collected, request portability, and object to processing. The same email address handles those requests.

Children

This site is not directed at children under 13 and I do not knowingly collect their information.

Changes to this policy

If I change how data is handled, I will update this page and bump the "Last updated" date at the top. Material changes that affect existing data will be sent to anyone on the newsletter list.

See also: Terms of Service.