Privacy Policy

Last updated: January 2026

1. Introduction

Welcome to the ICSRange Threat Scraper platform ("we", "us", "our", or "Company"). ICSRange is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and use our threat intelligence feeds service.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the site includes:

2.1 Authentication Information

  • Challenge tokens for session management
  • Session cookies with HTTP-only and secure flags
  • Authentication logs for security auditing

2.2 Usage Information

  • Information about your interactions with the platform (feeds accessed, searches performed)
  • Device information (browser type, IP address, device type)
  • Server logs including access patterns and timestamps

2.3 Threat Intelligence Data

  • Threat feeds you access (passive, no storage of user queries)
  • Data format preferences (JSON, text, MISP)

3. Use of Your Information

We use the information we collect for:

  • Providing and maintaining the threat intelligence platform
  • Authenticating and authorizing access
  • Security monitoring and fraud prevention
  • Improving platform performance and user experience
  • Compliance with legal obligations
  • Enforcing our Terms of Service

4. GDPR Compliance

As a service operating within the EU (headquarters in Copenhagen, Denmark), we comply with the General Data Protection Regulation (GDPR). Under GDPR, you have the right to:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Request your data in a portable format
  • Right to Object: Object to processing for direct marketing

5. Data Retention

Session data (challenge tokens, cookies) are retained for the duration of your session plus a 10-minute inactivity period, after which they are automatically deleted. Authentication logs are retained for security purposes and compliance with applicable laws, typically for 90 days unless otherwise required.

6. Security of Your Information

We use administrative, technical, and physical security measures to protect your information. This includes:

  • HTTP-only and Secure cookie flags
  • Session timeout after 10 minutes of inactivity
  • Secure authentication mechanisms
  • Encrypted data transmission (HTTPS)

However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Third-Party Services

Our threat intelligence feeds may aggregate data from various third-party sources. We encourage you to review the privacy policies of these sources. We are not responsible for the privacy practices of third-party services beyond our control.

8. Cookies

We use cookies for authentication and session management:

  • challenge_token_session - Stores your authentication token (HTTP-only)
  • last_activity - Tracks session activity for timeout purposes (HTTP-only)

You can control cookie settings in your browser, but disabling cookies may prevent proper functionality of the platform.

9. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

  • Email: contact@icsrange.com
  • Phone: +45 61 24 44 00
  • Address: Njalsgade 76, DK-2300 Copenhagen, Denmark

10. Data Protection Officer

As an organization operating in Denmark and Sweden, we have appointed a Data Protection Officer (DPO). For data protection inquiries, you may contact our DPO through the contact information above.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Your continued use of the platform following the posting of revised Privacy Policy means you accept and agree to the changes.