This Privacy Policy describes how PhoneDefend handles cybersecurity research data, vulnerability telemetry, and platform visitor information under the NIST Cybersecurity Framework, General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA/CPRA).

1. Information We Collect

PhoneDefend operates exclusively as a mobile security engineering research portal. We collect:

• Technical Diagnostic Logs: Standard HTTP server logs including IP addresses, browser user-agent tokens, TLS cipher suites, and resource latency metrics.
• Editorial Communication: Voluntary correspondence submitted via security research disclosure forms.

2. Google AdSense & DoubleClick DART Cookies

We partner with third-party advertising networks, including Google AdSense. Google utilizes cookies, including the DoubleClick DART cookie, to serve relevant advertisements to visitors based on prior visits to our site and other internet destinations. Users may customize or opt out of personalized ad tracking via Google Ad Settings.

3. Zero Telemetry Harvester Invariant

PhoneDefend does not deploy invasive device profilers, covert telemetry scrapers, or private identifier harvesters. All technical analyses are conducted in controlled sandbox lab environments.

4. Data Subject Rights & Vulnerability Reporting

Users may request log access, rectification, or deletion by contacting our privacy compliance desk.