Skip to content
Latest
Siemens Software Center ClickFix Attacks: Hunt Beyond the Trusted SignatureBeyondTrust Authentication Bypass: Patch the Appliance, Review the AccessPEERSTITCH: Recover the Management Trust, Not Just the FirewallCikaBika Bot: Detect the Document-to-Discord Attack ChainConnectWise Cloud Backup Incident: Revocation Is Not Tenant RecoveryAOMEI Update Tampering Shows Why Clean URLs Cannot Close Endpoint AlertsThird-Party VPN Access Shows Basic Controls Still Stop Bank IntrusionsMicrosoft Patch Tuesday Record Shows Patch Triage Must Be Risk-BasedIvanti Connect Secure Zero-Day Shows Edge Gateways Need Patch-and-Hunt DisciplineLiteLLM Gateway Flaws Show AI Infrastructure Needs Real Access ControlLiteLLM Gateway Flaws Show AI Proxies Need Control-Plane SecurityAhsayCBS Webshell Attacks Show Backup Servers Are High-Value Entry PointsDutch Warning on Chinese Edge-Device Attacks Shows Why Firewall Logs Must Leave the FirewallUAT-11985 Shows AI-Assisted Phishing Is Now Real-Time Account Takeover

Privacy

What we collect. Plain English.

Last updated: May 20, 2026

I run this site myself. I keep what you submit on a server I own, I read every message personally, and I do not sell, share, or trade your information. If you ever want your data removed, email me and I will delete it.

Who runs this site

Bulwark Black LLC. Registered in Spokane, WA. Owner-operator: Albert LaScola. Questions about your data go tosupport@bulwarkblack.com.

What I collect, and when

  • Browsing. Standard web-server logs (IP address, user agent, requested URL, and timestamp), used for security and debugging. I also use Google Analytics to see which pages get read and how people find the site. It sets its own cookies and sends usage data to Google. I do not run advertising pixels or ad trackers.
  • Newsletter signup. Just your email address.
  • Reviews. Display name, email, location, relationship to the work, star rating, and the review text. Your email is used to verify the review is real and is never published.
  • Apply / Contact / Capability Statement forms. Whatever you choose to write into the form, plus your name, email, and any optional fields you fill in (phone, organization, location, budget range).
  • Booking a call. Handled by Calendly. They collect your name, email, the call details, and (for paid calls) payment information via Stripe. See their policies linked below.

Where it goes

  • My server. Reviews, newsletter signups, and form submissions are stored in a self-hosted PostgreSQL database on a server I administer personally. No third-party CRM, no marketing platform.
  • Resend. I use Resend to send transactional emails (form confirmations, review approval notices to me). Resend processes the email address and message contents in transit. Seeresend.com/legal/privacy-policy.
  • Google Analytics. I use Google Analytics, a Google service, to measure site traffic. It processes your IP address, device and browser details, and the pages you view, and sets analytics cookies in your browser. Seepolicies.google.com/privacy.
  • Calendly + Stripe. Booking a paid advisory call sends your contact and payment info to Calendly and Stripe respectively. Seecalendly.com andstripe.com.
  • Email. The mailbox at support@bulwarkblack.com runs on a server I operate. If you email me, the message lives in that mailbox until I delete it.

Cookies

Google Analytics sets cookies to measure site traffic, for example to tell a returning visitor from a new one. I do not set advertising cookies, and I do not use cookies to track you across other websites. In regions that require it, such as the EEA and UK, I ask for your consent before analytics cookies are set, and you can accept or decline with the banner. You can change your choice any time with Cookie choices in the footer. The booking widget at Calendly may set its own cookies when you book a call. That is governed by Calendly's policy.

How long I keep it

  • · Web-server logs: 30 days, then rotated out.
  • · Newsletter signups: until you unsubscribe.
  • · Reviews: indefinitely (the published ones are the point of the page); rejected reviews are deleted on request.
  • · Form submissions: until the engagement closes, then archived for tax / business-records purposes per Washington State requirements (generally 7 years).

Your rights

You can ask me to show you what I have on you, correct it, or delete it. I will respond within 30 days. Email support@bulwarkblack.com with "Privacy request" in the subject line.

If you are in California (CCPA) or the EU/UK (GDPR), you have additional rights to know what is collected, request portability, and object to processing. The same email address handles those requests.

Children

This site is not directed at children under 13 and I do not knowingly collect their information.

Changes to this policy

If I change how data is handled, I will update this page and bump the "Last updated" date at the top. Material changes that affect existing data will be sent to anyone on the newsletter list.

See also: Terms of Service.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.