You agree to the privacy policy below, and the Privacy Policy for Substack, the technology provider.
Privacy Policy
Last updated: December 2025
The short version: I collect minimal data, don’t sell it, and use standard tools to run the newsletter.
What I collect
Email address — required to subscribe
Name — if you provide it
Payment info — if you become a paid subscriber (processed by Stripe, not stored by me)
Usage data — open rates, clicks, general engagement via Substack’s built-in analytics
How I use it
To send you the newsletter
To understand what content resonates
To occasionally email you about TCP (like the paid subscriber promo you may have received)
What I don’t do
Sell your data
Share your email with sponsors (they get aggregate numbers, not your info)
Send you spam or unrelated marketing
Third parties
TCP runs on Substack, which has its own privacy policy. Payments are processed by Stripe. I use standard analytics. I don’t control what these platforms do, but I chose them because they’re reputable.
Cookies
Substack uses cookies. I don’t add extra tracking beyond what’s built into the platform.
Your rights
Unsubscribe anytime (link at the bottom of every email)
Request deletion of your data (email me)
Ask what data I have on you (email me)
Data retention
I keep subscriber data as long as you’re subscribed. If you unsubscribe, Substack handles data removal per their policies.
Changes
I may update this policy. Significant changes will be noted in the newsletter.
Contact
Questions? darwin@thecybersecuritypulse.com