Privacy policy

heyshahrukh.me uses a small number of cookies and similar technologies to operate the site securely and remember your cookie preference.

When you click Accept on the cookie banner, we store a consent cookie and a matching browser storage entry so the banner is not shown again.

Our hosting provider may set strictly necessary cookies for security, load balancing, and HTTPS delivery. These are required for the site to function and do not require separate consent under most privacy laws.

If you sign in to the private admin area (/control-room), authentication tokens are stored in your browser to keep you signed in until you sign out.

ATT&CK Intelligence View at https://mitre.heyshahrukh.me is a free browser tool for exploring the MITRE ATT&CK matrix. It does not require an account to use.

The app stores a few preferences in your browser only: light/dark theme, tutorial progress, and whether you dismissed the welcome or onboarding prompts. These entries do not contain personal data and stay on your device until you clear site data.

When you import Excel files for TID comparison or filter lists, parsing happens entirely in your browser. Those file contents are not uploaded to our servers. Exports (JSON, Excel, PNG) are generated locally and downloaded to your device.

If you complete the optional export form before downloading, we receive your name, work email, export format, technique count, and a short summary of active filters via our API at api.heyshahrukh.me. We use that information only to understand how the tool is used and to improve it—we do not sell it.

The MITRE app does not use advertising or analytics cookies. Feedback links open the connect form on heyshahrukh.me.

sigma.heyshahrukh.me publishes Sigma detection rules mapped to MITRE ATT&CK techniques. It does not require an account to use.

The site stores only your light/dark theme preference in your browser. It does not use cookies, analytics, or advertising.

Filtering by platform, tactic, data source, or data component happens entirely in your browser against data already loaded from our API — no filter selections are sent to our servers.

We load fonts from Google Fonts and may serve assets through our CDN. Those providers may process technical data such as your IP address when resources are requested.

This site does not use advertising or analytics cookies (for example Google Analytics) on public pages.

If you submit the contact form, we process the information you provide (such as your name, email, and message) solely to respond to your inquiry. We do not sell personal data.

You can accept or dismiss non-essential notices via the cookie banner. You can also clear cookies and site data at any time through your browser settings.

If you have questions about this policy or wish to exercise privacy rights, contact us using the details below.