ransomwareready
Step through an attack

Privacy policy

Updated

Operator and scope

ransomwareready.eu is an educational resource operated by SEQ SIA (OffSeq), registration number 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia. The site has no user accounts, newsletter or comments. We receive personal data from the site only when you send it through the enquiry form.

The interactive tool

Attack-chain control selections are processed in your browser. The site does not send these selections or results to OffSeq or add them to outbound links. The application keeps the choices in page memory and does not save them to local storage. It is educational and does not inspect your accounts or infrastructure.

Enquiry form

Only the email address is required. If you provide them, we also receive your name, the topic you choose and your message. With them we receive the address of the page and the form placement the request was sent from, the time it was sent and the country Cloudflare derives from the connection. Your IP address is not included in the message or stored; Cloudflare uses it briefly to limit the number of submissions and deter automated spam. Your attack-chain selections are not attached to the request.

To tell people apart from automated spam, the form uses Cloudflare Turnstile. It loads only once you start filling in or submit the form and assesses technical browser and connection signals, such as the IP address and browser user agent; we do not pass what you type into the form to it. Cloudflare performs this check as our processor and also uses the signals, as an independent controller, to improve its bot detection (Turnstile Privacy Addendum). Our server receives only the result of the check and does not store it. To catch mistyped addresses, after you submit, our server looks up the email domain (the part after @) in Cloudflare’s public DNS; only the domain is sent. The legal basis is our legitimate interest in protecting the form from abuse (Article 6(1)(f) GDPR).

We use these data only to answer your request and, if you ask for one, to prepare a service proposal. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and, for questions unrelated to a service, the controller’s legitimate interest in answering correspondence it receives (Article 6(1)(f) GDPR). Providing the data is voluntary; without an email address we cannot reply.

Cloudflare’s email service, acting as a processor, delivers the request as an email to SEQ SIA’s mailbox, where the SEQ SIA staff who answer enquiries receive and handle it. We keep requests for up to 12 months after our last contact with you; if we enter into a contract, correspondence is kept for as long as the contract and applicable law require. Analytics records only a “Lead Submitted” event with the form placement – none of the details you enter.

Technical requests and traffic measurement

Serving a page through Cloudflare involves technical request data, including an IP address, browser headers, requested URL and request time. These data support delivery, security and operation of the site.

The site sends page views, clicks on OffSeq service and contact links and successful enquiry-form submissions to our self-hosted Plausible service at in.ainalytic.net. Events include the site domain, public page address, limited campaign parameters and the referring site’s origin when available. A link-click event adds only the destination path and a static placement label, such as header or guide; a “Lead Submitted” event adds only the form placement. Tool choices, results and form fields are not sent. The application does not set analytics cookies or a persistent visitor identifier; the collector receives technical network information with the request. Cookieless measurement still involves data processing.

Measurement is disabled when the browser signals Do Not Track or Global Privacy Control, or when this site’s local-storage preference plausible_ignore is true. It is also disabled for previews, local development and recognised automation. OffSeq links may carry static referral labels identifying the resource and link placement; these labels do not contain tool answers.

We use technical request data to operate and secure the site and page-view, link-click and form-submission statistics to understand resource use and interest in OffSeq services. The operator’s stated legal basis for these purposes is legitimate interests under Article 6(1)(f) GDPR. Hosting and infrastructure providers process requests on our behalf; the analytics service is self-hosted. Data are kept only as long as needed for those purposes and applicable legal obligations. The operator’s privacy policy explains its retention criteria, providers and transfer safeguards.

If you email support@offseq.com, we handle your correspondence in the same way as enquiry-form requests. OffSeq service links and cited sources take you to sites with their own privacy notices.

Your rights

Subject to the GDPR conditions, you may request access, correction, deletion, restriction or portability and object to processing. Contact support@offseq.com. You may also complain to Latvia’s Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority where you live or work. See the cookie and browser-storage notice for the theme preference.