Games run locally.
Scores, daily puzzle progress and preferences used by the games are kept in your browser when a game uses local storage. They are not sent to DirtyPhish and can be removed by clearing that site data.
PRIVACY
AT A GLANCE.
DirtyPhish is a no-login cybersecurity arcade. This page explains what the site stores, what stays on your device and when another service receives a request.
The download is not marketing consent.
If you request the Network Ports and OSI Model Reference Guide, DirtyPhish stores your email address, request source and timestamps and uses Brevo to deliver the requested email. The optional newsletter box is unticked; leaving it unticked does not stop the guide.
Consent is recorded and confirmed.
If you opt in, DirtyPhish records the consent wording and version, source and time, then asks you to confirm by email before Brevo adds you to the subscriber list. Every marketing email includes an unsubscribe option. You can also use the site unsubscribe page or email privacy@dirtyphish.com.
Links leave the site only when you choose.
Buy Me a Coffee, social sharing links and external guidance links open third-party services. Those services receive their normal request data under their own policies. DirtyPhish does not embed social feeds.
Advertising and your choices.
DirtyPhish uses Google AdSense. Google and its advertising partners may use cookies or other identifiers, including IP addresses, to deliver, measure and personalise ads. Ads are subject to Google approval and availability. For visitors in the EEA, UK and Switzerland, Google’s published consent message provides consent and privacy choices before relevant advertising storage is used. You can change your choices through the message’s privacy options. Guide requests and newsletter consent are separate from advertising consent.
Read Google’s advertising privacy information and manage personalisation through My Ad Center. Questions about site data can be sent to privacy@dirtyphish.com.
Visitor measurement and consent.
DirtyPhish uses Google Analytics to measure page views, traffic sources, approximate countries, device types and engagement. Google Analytics is off by default. Choose Allow analytics in the optional visitor measurement prompt to enable it, or No thanks to keep it off. Your choice is saved on this device. You can change it using Analytics privacy at the bottom left of the page; refusing after acceptance stops analytics storage and removes this site’s Google Analytics cookies. Ad blockers and consent choices can make the reports incomplete. This choice is separate from Google’s advertising consent message.
DirtyPhish does not send newsletter form contents, email addresses, query strings or URL fragments to Analytics. Automatic form tracking, Google signals and advertising personalisation signals are disabled. Read how Google uses information from partner sites. Use Analytics privacy to change your measurement choice.
Opt-outs stay opted out.
Unsubscribes, spam complaints and permanent delivery failures are recorded as suppression signals so the address is not treated as an active marketing subscriber. DirtyPhish does not sell visitor data.
Report issues privately.
Security reports can be sent to security@dirtyphish.com. The vulnerability-disclosure policy and machine-readable security.txt file explain the scope and safe-reporting expectations.