Privacy and cookies

Last updated: 8 November 2026. AlertFlow is operated by Ekaterina Sibrina in Spain. For privacy requests, contact privacy@alertflow.app.

What stays in your browser

AlertFlow is a free training application with three simulated SOC investigations and no account. Your completed-case progress, attempt counts, selected investigation steps, current evidence selection, latest verdict and random attempt ID are stored in this browser so you can return after refreshing or closing the page. Raw evidence text is not copied into browser storage. This local storage is used to provide the progress and resume features you request. You can remove all local data using your browser’s site-data controls; Try Again resets the current attempt. Progress is not synchronized between devices.

Optional analytics and feedback

Analytics is off until you choose Allow analytics. We rely on your consent for this optional processing. With consent, the site sends four explicit events to the existing PostHog EU project: landing viewed, case started, verdict submitted and debrief viewed. They may contain a case ID, a random attempt ID, your chosen verdict and result values. You can also choose to send two ratings and a difficulty choice after a case. Raw evidence, command lines, names, accounts, investigation content and written comments are not sent as event properties. PostHog processes an anonymous browser identifier in memory and the network request needed to receive an event. The project anonymizes IP addresses and the events disable GeoIP enrichment. Automatic click and page capture, session recording and person profiles are disabled.

You can decline or withdraw consent here at any time. Withdrawal stops future AlertFlow analytics and ratings; it does not automatically remove events already received by PostHog. For a request about earlier data, contact privacy@alertflow.app. Written comments are not collected because no private delivery channel is configured.

There is no age restriction on playing the investigations. Visitors under 14 can play without analytics or feedback submission. The current consent control does not offer analytics opt-in to them; it does not claim to verify parental authority. Earlier analytics choices must be made again because this age check was added.

Hosting and your rights

Cloudflare Pages delivers this public site and processes network addresses, request details and security information needed to deliver and protect it. For this necessary processing we rely on our legitimate interest in operating a reliable training site. PostHog EU receives optional analytics and ratings only after consent. Cloudflare may process data outside the EEA under the safeguards in its Data Processing Addendum. PostHog states that its EU Cloud is hosted in Frankfurt; see its privacy documentation for processing and transfer information.

Browser progress and consent remain until you clear site data or the application changes its storage format. On our Cloudflare Free plan, Security Events are available for up to 31 days; other service data follows Cloudflare’s applicable retention rules. We do not export visitor logs. PostHog Free has a one-year event retention window. PostHog says expired events may remain until batch deletion; we do not export separate copies. We review the need for analytics as the public test progresses. You can ask about a specific record or request deletion using the contact above.

Where applicable, you can request access, correction, deletion or restriction of personal data, object to processing, and request portability. Contact privacy@alertflow.app to exercise these rights. You can also complain to the Spanish Data Protection Agency (AEPD). The random identifiers used for gameplay may limit our ability to locate a particular PostHog event without information from your browser.

Cookies and local storage

The application uses browser local storage for progress, the current attempt and your analytics choice. PostHog’s anonymous identifier is kept in memory, not an analytics cookie. Cloudflare may set necessary security cookies when a protection challenge is shown. Cloudflare Access is not enabled for this public site.