Privacy Policy
This Privacy Policy explains how apisecurityguide collects, uses, and protects information when you visit this blog, use the Security Tools Hub, or play in the Cyber Playground. Your privacy matters — this page explains everything clearly.
Welcome to apisecurityguide (accessible at apisecurityguide.com and apisecurityguide.blogspot.com). This site is operated by Amardeep Maroli, an individual blogger based in Kerala, India, and includes the blog, the Security Tools Hub, and the Cyber Playground. This Privacy Policy applies to all visitors to this site and describes how personal information is collected, used, and protected.
By using this site, you agree to the practices described in this policy. If you disagree with any part of this policy, please discontinue use of the site.
1. Information We Collect
apisecurityguide is primarily a content blog and does not operate its own user registration, login system, or database. However, certain information may be collected through third-party services embedded in this site:
1.1 Information Collected Automatically
When you visit this site, standard web server and analytics tools may automatically collect:
- Your IP address (in anonymised or full form, depending on settings)
- Browser type and version
- Operating system
- Referring URL (the page you came from)
- Pages visited on this site and time spent on each page
- Date and time of your visit
- Device type (desktop, mobile, tablet)
This information is collected automatically by the Blogger/Google platform on which this site's blog is hosted and by Google Analytics if active. This data is used only in aggregated, anonymous form to understand which content is most useful to readers.
1.2 Information You Provide Voluntarily
You may voluntarily provide personal information in these situations:
- Comments: If you leave a comment on a post via the Blogger commenting system, your comment content and associated Google account name or alias will be visible publicly.
- Contact form: If you submit the Google Form on the Contact page, your name, email address, and message content are sent to the site owner via Google Forms. This data is not shared with third parties.
- Email: If you email the site owner directly, your email address and message contents are received and stored only by the site owner.
2. Security Tools Hub & Cyber Playground
The dashboards in the Security Tools Hub (AttackSurface AI, IdentityGuard AI, SentinelForge AI) and the games in the Cyber Playground (SOCVerse AI, Firewall Defender, Packet Investigator, PasswordLab, Cloud Security Challenge, and others) run entirely in your browser. They do not have a backend server and do not transmit your activity, inputs, or progress to apisecurityguide or any third party.
- Any progress, scores, or achievements you earn are stored locally in your own browser (for example, via
localStorage) and remain on your device only - Clearing your browser cache/site data, or switching to a different browser or device, will reset any locally stored progress
- No personal information is collected, transmitted, or stored on our servers through the Security Tools Hub or Cyber Playground
- These tools and games may still load fonts, icons, or other static assets from third-party CDNs, which are subject to those providers' own privacy practices
3. How We Use Your Information
Information collected through this site is used only for the following purposes:
- To understand site traffic patterns and improve content, tools, and game quality
- To respond to questions and messages submitted through the contact form or email
- To identify and fix technical issues with the site
- To detect and prevent spam, abuse, or fraudulent activity
We do not use your information for marketing purposes, we do not sell or rent your data to third parties, and we do not use it to build advertising profiles about you independently.
4. Cookies
This site uses cookies — small text files placed on your device by your browser. Cookies on this site come from:
4.1 Google / Blogger Platform Cookies
This site's blog is hosted on Blogger, a Google product. Google may set cookies for platform functionality, security, and preferences. See Google's Privacy Policy for details.
4.2 Google AdSense Cookies
This site displays advertisements through Google AdSense. Google uses cookies to serve ads based on your prior visits to this site and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and other sites on the internet.
You can opt out of personalised advertising by visiting Google's Ad Settings or aboutads.info.
4.3 Google Analytics Cookies
If Google Analytics is active on this site, it uses cookies to collect anonymous traffic data such as page views, session duration, and bounce rate. This data is aggregated and does not identify individual visitors. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
4.4 Managing Cookies
You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site, and some services and functionalities may not work.
5. Google AdSense & Third-Party Advertising
apisecurityguide uses Google AdSense to display advertisements. Google AdSense is a third-party ad network operated by Google LLC. Please note:
- Google uses cookies and web beacons to serve ads based on your browsing behaviour across websites
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites
- These third-party ad servers have their own privacy policies that are independent of this site
- apisecurityguide does not have access to or control over cookies placed by these third parties
- The content of advertisements is controlled by Google, not by apisecurityguide
For more information about how Google uses data from sites that use its services, visit: How Google Uses Data.
6. Affiliate Links & Sponsored Content
apisecurityguide participates in the Amazon Associates programme and may publish other affiliate links from time to time; these are clearly marked where used. Beyond that, this site does not publish sponsored content. If additional affiliate or sponsored relationships begin in the future, they will be clearly disclosed within the relevant posts in compliance with applicable guidelines.
7. External Links
Posts on this site may contain links to external websites, platforms, and resources such as TryHackMe, PortSwigger Academy, GitHub, and others. Once you leave this site via a link, you are subject to the privacy policy of the destination website. apisecurityguide has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites.
Always review the privacy policy of any external site before providing personal information on that site.
8. Children's Privacy
apisecurityguide does not knowingly collect personal information from children under the age of 13. This site is intended for readers who are at least 13 years old. If you are a parent or guardian and you are aware that your child has provided personal information to this site, please contact us so that the information can be deleted.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly.
9. Data Security
While no method of electronic storage or internet transmission is 100% secure, we take reasonable precautions to protect information submitted through this site:
- Contact form submissions are handled through Google Forms, which uses HTTPS encryption
- This site is served over HTTPS, encrypting data in transit between your browser and the server
- Email correspondence is handled through standard email services with basic security practices
- The Security Tools Hub and Cyber Playground store any progress locally in your browser rather than on a server, reducing what could be exposed in the event of a server-side incident
Please be aware that any information you post publicly in comments on this site is visible to all visitors and cannot be fully secured.
10. Your Rights Under Indian Law (DPDP Act, 2023)
India's Digital Personal Data Protection Act, 2023 provides certain rights to data principals (individuals whose data is collected). As a visitor to this site located in India, you have the right to:
- Know what personal data has been collected about you
- Request correction of inaccurate personal data
- Request erasure of your personal data (where applicable)
- Withdraw consent for data processing where consent was the basis for collection
To exercise any of these rights, please contact us using the details on the Contact page.
11. International Visitors — GDPR
If you are visiting this site from the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR), including rights of access, rectification, erasure, and portability of personal data. To exercise any GDPR rights, please contact us at the email on the Contact page. Requests will be processed within 30 days.
12. Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in site practices, new tools or games, third-party services, or applicable law. The effective date at the top of this page will be updated when changes are made. We encourage you to review this policy periodically. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
0 Comments