Last updated: July 2, 2026

This Privacy Policy explains how NexusNimbus (“we,” “us,” or “our”) collects, uses, and protects information when you visit nexusnimbus.com (the “Site”). By using the Site, you agree to the practices described here. If you do not agree, please discontinue use of the Site.

Who we are

NexusNimbus is a cybersecurity research and blue-team education blog that publishes technical articles and provides free, browser-based security tools. The Site is operated by the owner of nexusnimbus.com. For any privacy-related questions or requests, contact us at spatel.8756@gmail.com.

Information we collect

Information you provide

The Site does not require you to create an account to read articles or use the tools. If you contact us by email, we receive the information you choose to include in your message (such as your email address and its contents).

Information collected automatically

Like most websites, our hosting infrastructure and analytics tools automatically collect certain technical information when you visit, including your IP address, browser type and version, device and operating system, referring pages, pages viewed, and the date and time of your visit. This information is used to operate, secure, and improve the Site.

Cookies and similar technologies

A cookie is a small text file stored on your device by your browser. We and our third-party partners use cookies and similar technologies (such as web beacons and local storage) for the following purposes:

You can control or delete cookies through your browser settings. Disabling some cookies may affect how the Site functions. Most browsers let you refuse or remove cookies; consult your browser’s help documentation for instructions.

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC, to understand aggregate traffic and content performance. Google Analytics uses cookies and similar identifiers to collect information such as pages visited, time on site, approximate location (derived from IP address), and device characteristics. This data helps us measure and improve the Site. You can opt out of Google Analytics across websites by installing the Google Analytics Opt-out Browser Add-on. For more information, see Google’s Privacy Policy and How Google uses information from sites that use its services.

Google AdSense and third-party advertising

We may display advertising served by Google AdSense, a service provided by Google LLC. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

Third-party ad networks and vendors have their own privacy policies governing their use of cookies and data. We do not control these third-party technologies and their practices are not covered by this Policy. We encourage you to review Google’s Advertising policies.

Google Site Kit

The Site uses the official Google Site Kit for WordPress plugin to connect Google services — which may include Search Console, Google Analytics, PageSpeed Insights, and AdSense. These services process data as described in their respective privacy policies, linked above.

Our security tools and your privacy

The interactive security tools offered on this Site (such as the hash analyzer, email-header parser, URL scanner, and password checker) are designed to run entirely in your browser. As a general rule, the data you enter into these tools is processed locally on your device and is not transmitted to or stored on our servers.

The one deliberate exception is the password breach lookup, which uses the HaveIBeenPwned “Pwned Passwords” service via its k-anonymity model: your browser computes a SHA-1 hash of the password locally and sends only the first five characters of that hash to the service. Your actual password and its full hash never leave your device. See the HaveIBeenPwned privacy policy for details.

Log files

The Site follows a standard procedure of using server log files. These files log visitors when they access websites and may include IP addresses, browser type, Internet Service Provider, date and time stamps, referring/exit pages, and click counts. This information is used to analyze trends, administer the Site, and gather demographic information in aggregate. It is not linked to personally identifiable information.

How we use information

We use the information described above to operate and maintain the Site; to secure it against abuse and attacks; to measure and improve content and performance; to display and measure advertising; and to respond to your inquiries. We do not sell your personal information.

Your rights (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. Where we rely on consent (for example, for non-essential cookies), you may withdraw that consent at any time. The legal bases we rely on are your consent, our legitimate interests in operating and improving the Site, and compliance with legal obligations. To exercise your rights, contact us at spatel.8756@gmail.com. You also have the right to lodge a complaint with a supervisory authority.

Your rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, to request deletion of your personal information, to opt out of the “sale” or “sharing” of personal information, and not to be discriminated against for exercising these rights. We do not sell personal information for money. To exercise your rights, contact us at spatel.8756@gmail.com.

Children’s privacy

This Site is intended for a general, professional audience and is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Data retention

We retain automatically collected and analytics data only for as long as necessary for the purposes described in this Policy, after which it is deleted or anonymized in accordance with the retention settings of the third-party services we use.

Data security

We take reasonable technical and organizational measures to protect information against loss, misuse, and unauthorized access. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Third-party links

The Site contains links to external websites and resources that we do not operate. We are not responsible for the privacy practices or content of these third parties, and we encourage you to review their privacy policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Your continued use of the Site after any changes constitutes acceptance of the revised Policy.

Contact us

If you have any questions about this Privacy Policy or our data practices, contact us at spatel.8756@gmail.com.