Privacy & Data Handling
What we collect, why, and how we protect it. Plain language, no surprises.
Last updated: June 2026
Who we are
CyberLabs SUARL is a cybersecurity consultancy registered in Dakar, Senegal (RC SN DKR 2024 B 44266, NINEA 011627752), at 24 Ouest Foire, Dakar. We are the data controller for the information described on this page. For any question about your data, contact contact@cyberlabs.sn.
Our free security tools
The Email Security Check and Website Security Check are free tools. They are non-intrusive: they only read publicly observable information about a domain (public DNS records, HTTP response headers, TLS configuration) and never attempt to exploit a vulnerability or access private data.
When you run a check, we keep a domain-level result: the domain you entered, the score it received, and the outcome of each check. We use these results to build anonymized security benchmarks for the region (for example, how Senegalese fintech sites compare on HTTPS configuration). We do not store your email address as part of a scan.
For the Website Security Check, the scan runs on our server, so we briefly process your network address to apply rate limits and prevent abuse. For the Email Security Check, the DNS lookups run in your browser; only the domain-level result is sent to us.
When you request a full report
If you choose to receive a detailed report by email, we collect your email address together with the domain and score from your scan. We use this only to send you the report and to follow up about your security posture. You can ask us to delete this at any time.
When you contact us
Our contact form is handled by a third-party form provider (Formspree) that delivers your message to us by email. We receive your name, email address, and message. We use them only to reply to you and to discuss a possible engagement. We never sell or share this information.
Analytics
We use a privacy-friendly analytics service (Plausible) to understand how the site is used. It does not use cookies and does not collect personal data or build a profile of you across sites.
Network addresses and retention
We process IP addresses where it is technically necessary, mainly to rate-limit our tools and protect the service from abuse. We keep personal data only as long as needed for the purpose it was collected for, and we keep technical logs for security and reliability for a limited period before they are cleared or aggregated.
Where your data lives
The website and its supporting services run on Microsoft Azure infrastructure in European regions, protected by encryption in transit, restricted access, and managed credentials.
Your rights
Under Senegalese law 2008-12 on the protection of personal data, and the EU GDPR where it applies, you can ask us to access, correct, or delete your personal data, or to stop processing it. Senegal's data protection authority is the Commission de protection des donnees personnelles (CDP). To exercise any of these rights, email contact@cyberlabs.sn and we will respond within a reasonable time.
Reporting a security issue
If you have found a security issue in our systems, please see our responsible disclosure contact. We welcome good-faith reports.
Changes
We may update this page as our services evolve. The date at the top reflects the latest version.