Skip to content
Bulwark Black Bulwark Black LLC
Latest
Autonomous AI Agent Espionage Shows Why Post-Compromise Speed MattersSharePoint KEV Listing Turns Collaboration Servers Into Incident-Response PrioritiesJscrambler npm Compromise Shows Build Pipelines Need Runtime ControlsGhost Phishing Shows Why Email Security Must Follow the BrowserPakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic TargetsBad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority QueueFake Payment SDKs Show Why Dependency Risk Is Credential RiskCritical UniFi Flaws Put Network Control Planes Back in the Patch QueueVidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak ControlsADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity InfrastructureUAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay InfrastructureFortiBleed Shows Firewall Credentials Are Ransomware FuelNetNut and Popa Takedown Shows Residential Proxies Are Now Attack InfrastructureVect and TeamPCP Show Supply-Chain Credentials Are Ransomware Fuel

Privacy

What we collect. Plain English.

Last updated: May 20, 2026

I run this site myself. I keep what you submit on a server I own, I read every message personally, and I do not sell, share, or trade your information. If you ever want your data removed, email me and I will delete it.

Who runs this site

Bulwark Black LLC. Registered in Spokane, WA. Owner-operator: Albert LaScola. Questions about your data go to support@bulwarkblack.com.

What I collect, and when

  • Browsing. Standard web-server logs (IP address, user agent, requested URL, and timestamp), used for security and debugging. I also use Google Analytics to see which pages get read and how people find the site. It sets its own cookies and sends usage data to Google. I do not run advertising pixels or ad trackers.
  • Newsletter signup. Just your email address.
  • Reviews. Display name, email, location, relationship to the work, star rating, and the review text. Your email is used to verify the review is real and is never published.
  • Apply / Contact / Capability Statement forms. Whatever you choose to write into the form, plus your name, email, and any optional fields you fill in (phone, organization, location, budget range).
  • Booking a call. Handled by Calendly. They collect your name, email, the call details, and (for paid calls) payment information via Stripe. See their policies linked below.

Where it goes

  • My server. Reviews, newsletter signups, and form submissions are stored in a self-hosted PostgreSQL database on a server I administer personally. No third-party CRM, no marketing platform.
  • Resend. I use Resend to send transactional emails (form confirmations, review approval notices to me). Resend processes the email address and message contents in transit. See resend.com/legal/privacy-policy.
  • Google Analytics. I use Google Analytics, a Google service, to measure site traffic. It processes your IP address, device and browser details, and the pages you view, and sets analytics cookies in your browser. See policies.google.com/privacy.
  • Calendly + Stripe. Booking a paid advisory call sends your contact and payment info to Calendly and Stripe respectively. See calendly.com and stripe.com.
  • Email. The mailbox at support@bulwarkblack.com runs on a server I operate. If you email me, the message lives in that mailbox until I delete it.

Cookies

Google Analytics sets cookies to measure site traffic, for example to tell a returning visitor from a new one. I do not set advertising cookies, and I do not use cookies to track you across other websites. In regions that require it, such as the EEA and UK, I ask for your consent before analytics cookies are set, and you can accept or decline with the banner. You can change your choice any time with Cookie choices in the footer. The booking widget at Calendly may set its own cookies when you book a call. That is governed by Calendly's policy.

How long I keep it

  • · Web-server logs: 30 days, then rotated out.
  • · Newsletter signups: until you unsubscribe.
  • · Reviews: indefinitely (the published ones are the point of the page); rejected reviews are deleted on request.
  • · Form submissions: until the engagement closes, then archived for tax / business-records purposes per Washington State requirements (generally 7 years).

Your rights

You can ask me to show you what I have on you, correct it, or delete it. I will respond within 30 days. Email support@bulwarkblack.com with "Privacy request" in the subject line.

If you are in California (CCPA) or the EU/UK (GDPR), you have additional rights to know what is collected, request portability, and object to processing. The same email address handles those requests.

Children

This site is not directed at children under 13 and I do not knowingly collect their information.

Changes to this policy

If I change how data is handled, I will update this page and bump the "Last updated" date at the top. Material changes that affect existing data will be sent to anyone on the newsletter list.

See also: Terms of Service.