Privacy Policy
This policy explains what unignosis.com collects, why, how long we keep it and what you can ask us to do about it. It is short because this website does very little with your data. It is a static marketing site with one contact form and no tracking of any kind.
Who we are
unignosis builds CyberRange, a browser-based lab platform for universities. unignosis is the data controller for this website. You can reach us through the Contact page.
This policy covers unignosis.com only. The CyberRange platform at cyberrange.world holds student and institutional data under a separate agreement with each university, and nothing on this page describes how that product handles data.
What this website does and does not do
- unignosis.com is a static marketing website. It serves six pages: Home, About, Services, Contact, this Privacy page, and a page shown when a link is broken.
- It has one contact form, on the Contact page. There are no accounts, no logins, no comments and no payments.
- It runs no analytics, no advertising, no social plugins, no session recording and no fingerprinting. There is no Google Analytics, no advertising pixel and no equivalent.
- Fonts, stylesheets, scripts and images are all served from unignosis.com itself, so simply reading these pages sends no requests to any third-party server. The one exception is the contact form, described below, which only contacts our own endpoint and only when you press send.
Cookies
unignosis.com sets no cookies of its own and stores nothing in your browser's local storage.
Our network provider, Cloudflare, may set strictly necessary cookies such as __cf_bm and cf_clearance for bot management and security. These are exempt from consent requirements under UK GDPR and PECR because they are strictly necessary to deliver the page you requested. They are not used to track you across other websites, and we cannot read them.
Because we set no non-essential cookies, there is no cookie banner. That is deliberate.
Hosting and request logs
unignosis.com is hosted on Cloudflare Pages. We do not run a web server of our own, and we do not keep our own access logs. There is no server anywhere that we control holding a record of your visit.
Cloudflare serves every request from its edge network and logs it on its own systems, on its own retention schedule, under the Cloudflare privacy policy. A log line of that kind normally holds the timestamp, the requested URL, the response status, your browser's user-agent string and your IP address. This is ordinary infrastructure logging, needed to deliver the page and to block attacks.
- Why it happens: delivering the site, and protecting it from abuse.
- Legal basis: our legitimate interests in keeping the site available and secure, under Article 6(1)(f) of the UK GDPR.
- What we can actually see: aggregate request counts in the Cloudflare dashboard. We cannot identify individual visitors from them, and we do not try to.
- Nothing here is sold, shared for advertising, or combined with any other data set.
The contact form
When you submit the form on the Contact page, the following is sent over HTTPS to a Cloudflare Worker we operate, which forwards it to our team inbox using Cloudflare Email Routing:
- Your name and work email address. Both are required.
- Your institution, which is optional and may be left blank.
- Your message.
- Two anti-spam signals: a hidden field that people never see but automated scripts tend to fill in, and the number of milliseconds between the page loading and you pressing send. Both exist only to judge whether a submission is automated. Neither tells us anything about you or your browsing, and neither affects our reply.
We do not use a third-party CAPTCHA, so nothing about you is sent to a CAPTCHA vendor.
- Why we do it: to read your enquiry and reply to it.
- Legal basis: our legitimate interests in responding to a business enquiry you chose to send us, under Article 6(1)(f) of the UK GDPR.
- How long we keep it: we delete the email thread once the conversation is finished, or after twelve months, whichever comes first.
- We do not add you to a mailing list and we do not pass your details to anyone for marketing.
Who else is involved
The list of third parties is deliberately short. Cloudflare acts as our processor for content delivery, security, the contact-form endpoint and email routing. Their terms are set out in the Cloudflare privacy policy. There are no other processors, no data brokers and no advertising partners.
Where your data is processed
Cloudflare runs a global network and is headquartered in the United States, so a page request or a form submission may be handled on infrastructure outside the United Kingdom. Cloudflare covers these transfers using the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
Automated decisions
We do not carry out profiling, and we make no automated decisions that have legal or similarly significant effects. The only automated step on this site is the spam check on the contact form, which decides whether a submission reaches our inbox. If you believe a genuine message was blocked, please send it again.
Your rights under UK GDPR
You have the right to:
- Ask what personal data we hold about you and receive a copy of it.
- Have inaccurate data corrected.
- Have data erased.
- Restrict our processing, or object to it, including objecting to the legitimate interests described above.
- Receive the data you gave us in a portable, machine-readable format.
- Complain to the Information Commissioner's Office, the UK regulator, without raising it with us first.
We will respond within one month. In practice this website holds very little about anyone: short-lived server logs, and your enquiry email if you have sent one.
Children
This website is aimed at university staff in procurement, faculty and IT. It is not directed at children, and we do not knowingly collect data about anyone under the age of 16.
Changes to this policy
If we change anything material, we will update the effective date at the top of this page and record what changed at the bottom.
Contact us about privacy
Please use the Contact form and say in your message that it is a privacy request, so we can route it to the right person. Tell us what you would like us to do, and we will deal with it.
Last updated: 19 September 2026. This revision corrected the stated server-log retention period, disclosed the two anti-spam fields the contact form submits, added the legal bases for processing and the position on international transfers, separated this site from the CyberRange product, and removed an instruction to use a subject-line option that the form does not have. It also replaced the description of our own web-server logs: the site moved to Cloudflare Pages, so we no longer run a server or keep access logs of our own.