Skip to content
Blackhole Cyberstrategy Book a fit call

Site policies

Privacy, accessibility, and security.

These are short on purpose: a security advisory firm should be able to explain what it collects in plain language.

Last reviewed October 2026

Privacy

This site is operated by Blackhole Cybersecurity LLC, a Texas limited liability company doing business as Blackhole Cyberstrategy. This site sets no cookies of its own and runs no analytics or advertising. The home page keeps one flag in your browser's session storage so the opening sequence plays once per visit; it is never sent anywhere and disappears when you close the browser. The fit check on the booking page runs entirely in your browser; your answers are not stored or transmitted. The booking calendar on that page is served by Microsoft Bookings inside an embedded frame and is not loaded until you choose to load it; Microsoft may set cookies within that frame under its own privacy statement.

If you email a request instead of booking, the booking page can open a pre-filled message in your mail app or copy the same text for you to paste into any email; nothing leaves the page until you send it yourself. What you send arrives at hello@blackholecyberstrategy.com and is used only to prepare for and follow up on the call. It is not shared or sold.

Booking a time uses Microsoft Bookings, which processes the details you enter there under Microsoft's privacy terms. The site's fonts are served from this site, so no font provider receives your IP address. The site is hosted on Cloudflare Pages, which receives your IP address and request details in order to serve the page.

Client files are never collected through this site. Once we have a signed agreement, documents and evidence for an engagement are exchanged through a private Microsoft 365 workspace (SharePoint). Access is limited to the named people at your organization and at Blackhole Cyberstrategy who work on the engagement, and each person signs in with multi-factor authentication. Microsoft hosts the workspace under its own privacy and security terms. Files are used only for the engagement and are returned or deleted as our agreement with you provides, by default within 30 days after the engagement ends.

To have anything you sent deleted, email hello@blackholecyberstrategy.com.

Accessibility

This site is built to meet WCAG 2.2 Level AA. Every page works with a keyboard alone, includes a skip-to-content link and visible focus indicators, uses semantic headings and landmarks, keeps text contrast above 4.5:1, and respects your reduced-motion preference.

The embedded booking calendar is provided by Microsoft. If it is difficult to use, the same booking page opens in a new tab, or you can request times by email.

If anything here is hard to use, email hello@blackholecyberstrategy.com with the page and what happened. Reports are answered within five business days.

Security and responsible disclosure

Found a vulnerability in this site or its domain? Report it to security@blackholecyberstrategy.com. You will get an acknowledgement within two business days. Good-faith research that avoids data access, service disruption, and privacy violations will not be met with legal action.

Machine-readable contact details are published at /.well-known/security.txt.

Please do not send credentials, logs, reports, diagrams, or incident evidence through this site or by email. Once an agreement is in place, files are shared through a private, access-controlled Microsoft 365 workspace. Passwords and other secrets are never uploaded there either; I'll arrange a separate one-time method for those.