Privacy notice
What happens to your email address
This notice covers the email address you give to open the Dark Pyramid tools on this site. Last updated 10 November 2026.
Who is responsible
Peter Stephenson is the controller of this information. Contact: hello@peterstephenson.com.
What is collected
When you open the Organisational Vulnerability Audit or the Audit Workbook, the site records your email address, which tool you opened, whether you ticked the box to receive emails, and the date. The form provider also logs technical details of the submission, such as IP address and browser type.
Nothing you enter inside the tools is collected. Your scores and notes are stored only in your own browser, on your own device, and you can remove them with the “Clear my answers” button.
If you choose “Email it to me”, your answers are sent once, to the address you give, through Netlify and the email delivery service Resend. I do not receive or keep a copy; Resend keeps a delivery record for a limited period.
Why, and on what basis
Your address is used to understand who is using the tools. The lawful basis is legitimate interests: knowing how research-based tools are being taken up, in a way that has little impact on you.
If you tick the box, your address is also used to send occasional emails about new tools, research and talks. The lawful basis is your consent, which you can withdraw at any time by replying to any email or writing to the address above.
Who it is shared with
Submissions are stored by Netlify, which hosts this site and processes the form on my behalf. Emails you ask for are delivered by Resend. Both are based in the United States, so your information may be stored outside the UK. It is not sold or passed to anyone else.
How long it is kept
For up to two years after you last opened a tool or, if you asked for emails, until you unsubscribe. It is then deleted.
Your rights
You can ask for a copy of your information, for it to be corrected or deleted, or object to its use, by emailing hello@peterstephenson.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
This site sets no tracking or advertising cookies. The tools use your browser’s local storage to remember your answers and that you have opened them.