Privacy Policy
This policy covers this website. It explains what portnoc.net collects when you visit or contact us, why, and who else sees it. Information we handle inside a client's environment under a managed services agreement is governed by that agreement, not by this page.
1. Who we are
PortNOC LLC ("PortNOC", "we", "us") operates portnoc.net from Appleton, Wisconsin, United States. We are the controller of the information described in this policy. Our contact details are at the foot of this page.
2. What we don't do
Worth stating plainly, because it is unusual enough to be worth checking:
- No cookies. This website sets none at all.
- No analytics. There is no Google Analytics, no tag manager, no heatmapping, and no session recording.
- No advertising or tracking pixels, and no remarketing.
- No browser storage. Nothing is written to local storage, session storage, or IndexedDB.
- We do not sell personal information, and never have.
You can verify all of this from your browser's developer tools. We would rather you checked than took our word for it.
3. What we collect
When you just read the site
Our web server keeps standard access logs. Every web server does; without them we could not detect abuse or diagnose faults.
| Recorded | Why |
|---|---|
| IP address | Security, abuse prevention, rate limiting |
| Date and time of request | Diagnostics |
| Page requested and response code | Diagnostics, finding broken links |
| Browser user-agent string | Compatibility, identifying automated traffic |
| Referring page, when your browser sends one | Understanding how people arrive |
These logs are not linked to any individual and are not used to build a profile of you.
When you submit the assessment request form
You choose what to put in it. The form asks for:
| Field | Required |
|---|---|
| Name | Yes |
| Business email address | Yes |
| Company | Yes |
| Phone number | No |
| Your message | No |
| Consent to be contacted | Yes |
The submission is emailed to our team. Your IP address and the time of submission are included in that email, so that we can identify abuse of the form. Nothing you type is written to a database on this website — the site stores no submissions of its own.
Please do not put confidential information, credentials, or sensitive personal data in the message field. It is an unencrypted email once it reaches us, and a contact form is the wrong place for any of that.
Anti-spam checks
The form includes a field hidden from human visitors, and records when the page was loaded, so that automated submissions can be identified and discarded. We also count submissions per IP address for one hour to limit flooding. These counts are held in memory only and are not retained.
4. How we use it
We use what the form collects to:
- respond to your enquiry and arrange an assessment or conversation;
- keep a record of the enquiry and our correspondence about it;
- protect the form and the site from abuse.
We do not add you to a marketing list on the strength of a contact form submission. If we ever start sending marketing email, it will be because you asked for it, and every message will let you stop it.
Where a legal basis is required, we rely on your consent for the form (you tick the box), and on our legitimate interest in operating and securing the website for server logs.
5. Who else sees it
Only the providers needed to run the website and receive your message. We do not sell, rent, or trade personal information, and we do not share it for anyone else's marketing.
| Provider | What reaches them | Why |
|---|---|---|
| Microsoft 365 | Form submissions, as email | Delivers and stores our email |
| Google Fonts | Your IP address and browser details | Serves two typefaces used on this site |
| Unsplash | Your IP address and browser details | Serves two photographs |
Google and Unsplash receive your IP address purely because your browser fetches a font or an image from them, as it would from any site that embeds them. They receive nothing you type.
We may also disclose information where we are legally required to, or to establish or defend legal claims.
6. How long we keep it
- Web server logs: rotated and deleted after 14 days.
- Enquiries: kept as email for as long as needed to deal with your enquiry and for a reasonable period afterwards as a business record. If the enquiry becomes an engagement, our agreement with you governs retention from that point.
- Rate-limit counters: one hour, in memory, never written to disk.
You can ask us to delete your enquiry at any time. See below.
7. Your rights
Depending on where you live, you may have the right to ask us for a copy of the personal information we hold about you, to correct it, to delete it, or to object to how we use it. Residents of California, Virginia, Colorado, Connecticut and a number of other states, and people in the UK and EEA, have such rights under their local law.
We will honour these requests regardless of whether the law technically requires us to, because it is a small amount of data and the right thing to do. Write to us using the details below and we will respond within 30 days. We will not discriminate against you for asking.
Because we set no cookies and run no analytics, there is no tracking to opt out of and no "Do Not Sell My Personal Information" mechanism to offer — we do not sell or share personal information as those laws define it.
8. Security
The website is served only over HTTPS. The service that handles form submissions runs on an isolated internal address, unreachable from the internet except through the website itself, under an unprivileged account with a read-only filesystem. Credentials are held outside the application, readable only by the system administrator account.
No system is perfectly secure, and we will not claim otherwise. If you believe you have found a vulnerability in this site, please tell us at support@portnoc.net. We will acknowledge you and will not pursue action against anyone reporting in good faith.
9. Client data
If you are a PortNOC client, the data we handle inside your environment — user accounts, device inventories, backups, monitoring telemetry, support tickets — is not covered by this policy. It is governed by the managed services agreement, statement of work, and any data processing terms signed with you. In that context we act as a processor on your instructions, not as a controller.
Our Client Portal at support.portnoc.net is a separate system on separate infrastructure, with its own terms and privacy handling.
10. Children
This is a business-to-business website. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.
11. Changes
If we change this policy we will update the date at the top of the page. Where a change materially affects how we handle information already given to us, we will make a reasonable effort to tell the people affected directly.