MK Privacy & Data Governance

Privacy Notice

This notice transparently explains how MKCyberLabs collects, stores, and protects data when you browse this website, submit contact inquiries, or manage analytics preferences.

Effective Date: November 4, 2026 • Version 1.1

01. Controller & Portfolio Identity

MKCyberLabs (mkcyberlabs.in) is a personal technology portfolio, cybersecurity research repository, and full-stack engineering journal developed and operated by Manickam Kumar.

If you have questions about this privacy notice, data handling practices, or wish to exercise your privacy rights, contact directly via email at contact@mkcyberlabs.in.

02. Contact Inquiries & Personal Data Collected

When you initiate communication through the Contact Form, you provide:

Full Name: Used to address you in direct communication.
Email Address: Used solely to reply directly to your inquiry.
Subject & Message Content: Your project proposal, technical inquiry, or collaboration message.

Processing Purpose: Communication initiated by the visitor for professional, technical, or research collaboration. Inquiry details are stored securely in a local relational database (mkcyberlabs_contact_messages) on the hosting server.

03. Connection Logging & Infrastructure Defense

To maintain server stability, prevent automated spam attacks, and defend infrastructure against brute-force abuse:

IP Address & User-Agent: Recorded alongside submitted inquiry records in the database (mkcyberlabs_contact_messages) to enforce submission rate limits (5 submissions per 10 minutes per connection) and maintain defensive audit trails.
Honeypot Verification: Automated hidden form fields silently intercept and discard scripted spam bots without processing.

Standard web server access and error logs capture client IP addresses, timestamps, request URIs, HTTP status codes, and user-agent strings for infrastructure diagnostics and DDoS mitigation.

04. Email Routing & Hosting Architecture

When a valid contact inquiry is submitted, an internal notification is dispatched via authenticated encrypted SMTP to the administrative inbox, with a copy retained in the domain mailbox (contact@mkcyberlabs.in).

The website is hosted on Linux infrastructure managed by HostyCare in an isolated cPanel virtual environment with isolated databases, restricted filesystem permissions, and strict domain sandboxing.

05. Google Analytics 4 & Consent Mode v2

This website integrates Google Analytics 4 (G-JRZVLFMDK8) strictly utilizing Basic Consent Mode with a default-denied policy for nonessential analytics:

analytics_storage: denied Denied by default; activated only if accepted

ad_storage: denied Disabled; zero advertisement cookies

ad_user_data: denied Disabled; no user data sent to Google Ads

ad_personalization: denied Disabled; no remarketing or profiling

Basic Consent Guarantee: No Google Tag Manager scripts are loaded and no tracking hits or cookies are created unless you explicitly click "Accept Analytics". If you click "Reject Optional", Google Analytics remains entirely unloaded.

• Zero personal data, inquiry contents, names, or emails from the contact form are ever transmitted to Google Analytics.

06. Cookies & Browser Storage Transparency

Storage Item	Type	Category	Purpose
mkcyberlabs_session	HTTP Cookie	Strictly Necessary	Winter CMS framework session and CSRF anti-tampering protection (HttpOnly, SameSite=Lax, Secure).
mkcyberlabs_analytics_consent	localStorage	Strictly Necessary	Stores your explicit analytics choice (`granted` or `denied`).
_ga, _ga_*	HTTP Cookie	Optional (Consent Required)	Set by Google Analytics 4 ONLY after explicit consent to distinguish visitor sessions.

07. Visitor Rights & Preference Controls

You retain complete control over your analytics preferences and stored information:

Change or Withdraw Consent: You can modify or withdraw your analytics preference at any time by clicking the permanent link in the footer. Withdrawing consent immediately updates all consent signals to denied and clears first-party _ga cookies.
Access, Correction, or Deletion: If you have previously submitted an inquiry through the contact form and would like your message deleted or corrected, email your request to contact@mkcyberlabs.in or submit a message via the Contact Form. Requests are verified and fulfilled promptly.

08. Technical & Operational Security Measures

In alignment with cybersecurity best practices, MKCyberLabs applies verified baseline controls:

Transport Security: Strict HTTPS encryption across all routes using modern TLS.
Defensive HTTP Headers: Active enforcement of X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, and Referrer-Policy: strict-origin-when-cross-origin.
Input Sanitization: Form inputs are stripped of executable tags, validated against strict email patterns, and output-escaped in Twig templates.
Secret & Credential Isolation: Application configuration, encryption keys (APP_KEY), and database credentials reside outside the public web root.
Data Retention: Inquiries and diagnostic logs are retained as long as necessary for administrative continuity, communication response, and threat defense. Data is never sold, leased, or repurposed.

← Return to Homepage Have a question? Contact Manickam →