Updated October 28, 2026

Privacy.

Your Cyber Brief is published by Shaping Rooms. You can read our briefings and source watch without creating an account or signing in to Google. We store your light/dark preference in your browser. Cloudflare processes requests to host and protect the site.

Embedded videos load from YouTube’s privacy-enhanced player. Watching or opening a video involves Google/YouTube under their Privacy Policy. Public source links lead to independently operated sites.

Publishing authorization

Our publishing application uses the YouTube API to upload and manage this publication’s own videos, captions, thumbnails, and playlists. It is for the publication’s authorized owner, and does not provide visitor Google sign-in or request access to visitor accounts. Publishing credentials are held in encrypted cloud secrets; they are not included in public site files or articles. We do not sell Google account data or use it to train models.

The owner can revoke Google authorization at Google Account permissions. On revocation or an owner deletion request, we remove the publishing credential from the cloud configuration. Public videos remain on YouTube until separately removed by their owner.

If you subscribe to email delivery, we store your email address, selected roles, confirmation and consent time, and delivery status. Resend processes your address and the messages to provide delivery. We send one morning email with your selected briefings after you confirm. You can change your roles or unsubscribe from any email. We do not import contacts or sign people up without confirmation. Email links authorize only your subscription preferences; do not share them. To request removal of your subscription data, contact hello@yourcyberbrief.com.

Device notifications

Push is optional and separate from email. We store the browser’s delivery endpoint, encryption keys, your selected roles, consent time and delivery status. A random token kept in this browser controls only its notification choices; no account or email address links your devices. Your browser’s push provider (such as Apple, Google, Mozilla or Microsoft) processes the endpoint and encrypted message for delivery. We do not put device tokens or endpoints in public URLs or logs. We retain delivery records for 90 days, remove endpoints reported expired by the provider, and remove the stored subscription when you stop notifications here. Your browser may still show this site as allowed until you change its permission. Clearing browser storage can remove your local controls; you can always revoke notifications in your browser or device settings.

If you contact hello@yourcyberbrief.com, we use your message to respond and handle the request. Please use that address for privacy questions or correction requests.