Privacy
Privacy, in plain words.
What this website collects, what happens to your messages and to data seen during an engagement, and who is responsible for it.
- 01
Who is responsible
APTStrike is not yet a registered company. Until it is, APTStrike is the name under which Shahriyor Tursunov works as an individual penetration tester.
Shahriyor Tursunov is therefore personally responsible for the personal data described on this page. Any engagement is discussed and agreed with Shahriyor Tursunov directly, and any contract is made with Shahriyor Tursunov as an individual.
When APTStrike is registered as a company, this page will be updated to name it.
- 02
What this website collects
This website sets no cookies of its own and uses no analytics, advertising or tracking scripts. Fonts are served from this website, not from a third party.
The contact form sends your name, company, email address and message to this website, which forwards them by email to APTStrike. They are not stored on the website.
The website is hosted on Cloudflare, which processes technical data such as IP addresses and request logs to deliver and protect the site.
- 03
Email
Contact form requests and messages to contact@aptstrike.com and security@aptstrike.com are delivered through Cloudflare Email Routing to a mailbox hosted by Google. Both providers process the messages to deliver them.
We use what you send only to reply, to prepare a proposal and, if you decide to go ahead, to run the engagement.
- 04
Data seen during an engagement
Testing can expose data from your systems. It is used only for the engagement, never shared with anyone other than the contacts you name, and handled under the written agreement for that engagement.
Reports and evidence are kept until the contract for the engagement ends, and are then deleted. You keep your own copy of the report.
- 05
Sharing
Personal data is never sold. It is shared only with the service providers named above, and with authorities where the law requires it.
- 06
How long it is kept
Correspondence that does not lead to an engagement is kept for 12 months and then deleted. Data from an engagement is kept until its contract ends, as described above.
- 07
Your rights
You can ask to see the personal data held about you, to correct it, or to have it deleted, in line with the Law of the Republic of Uzbekistan “On Personal Data” and, where it applies to you, other data protection law.
Write to contact@aptstrike.com. You will receive a reply within 24 hours.
- 08
Changes
This page changes when the way data is handled changes, including when APTStrike is registered as a company. Last updated: 28 October 2026.