Privacy Policy

OffRecon C-Forums is a self-hosted cyber threat intelligence (CTI / OSINT) monitoring platform, restricted to vetted audiences. This policy describes how your personal data is processed, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the operator of the OffRecon platform. For any question regarding your data, contact us via the Contact page.

2. Data collected

We only collect data strictly necessary for access management and security:

• Account data: name, professional e-mail address, organisation, professional category and the justification provided when requesting access;
• Connection data: IP address and device type (user-agent), for security purposes.

No browsing data is collected for advertising purposes. Searches performed in the tool are never logged.

3. Purposes and legal basis

This data is processed to create and approve accounts, secure access and ensure connection traceability. The legal basis is the operator's legitimate interest in securing a restricted-access platform, together with the performance of the terms of use accepted at registration.

4. Retention periods

• Account data: kept for as long as the account is active;
• Connection IP addresses: 3 months, then automatically purged;
• Upon account deletion, personal data is erased.

5. Recipients

Your data is neither sold nor shared with third parties. The platform is self-hosted; only authorised administrators can access it.

6. Your rights

Under the GDPR, you have a right of access, rectification, erasure, restriction and objection. You may exercise these rights from your My account area or via the Contact page. You also have the right to lodge a complaint with the competent data protection authority (in Belgium: the Data Protection Authority — APD/GBA).

7. Cookies

Only a strictly necessary session cookie required for authentication is used. No third-party tracking or analytics cookies are set.