Privacy policy

Last updated: 2026-10-07

This policy explains what alb-lang.org collects when you visit or use the site, and what we do with it. The short version: we collect as little as possible, we never sell data, and uploaded scan files are never shared or downloadable.

What we collect

Accounts. If you register, we store your username and a password hash — never the plaintext password. A profile may include information you choose to publish.
Forum posts and uploads. Content you post publicly is public by design.
ALB SCAN submissions. Files you submit are stored encrypted in an isolated quarantine for 30 days, then destroyed. Analysis reports — file name, size, hashes, extracted metadata and strings — are published publicly and kept permanently. Your consent to the scan terms is logged with a timestamp and a hashed (non-plaintext) network identifier. Samples are never downloadable by anyone.
Abuse-prevention logs. The firewall and rate limiter may temporarily log network identifiers (in hashed form where practical) to keep the service running.
Local preferences. Settings such as your chosen language are stored in your own browser's local storage, not on our servers.

Third-party services

Advertising (Google AdSense). This site displays ads served by Google. Google and its partners use cookies to serve ads based on your visits to this and other sites. You can opt out of personalized advertising at Google Ads Settings, and learn more at How Google uses information.
Reputation lookups (ALB SCAN). File hashes — never the files themselves — may be checked against MalwareBazaar (abuse.ch) and CIRCL hashlookup.
News content. ALB News embeds headlines, images, and approved live streams from third-party publishers; loading them means your browser contacts the publisher's servers.
No AI processing of your data. AI assistants are used to draft some site content, but they never receive your account data, messages, submissions, or any personal information — and they never will. See the AI disclosure.

Cookies

We use a small number of first-party cookies/storage for sign-in sessions and preferences. Third-party advertising cookies are controlled by Google as described above. You can block cookies in your browser; the site remains readable without them, though sign-in will not work.

Children

The site is family-friendly and intended for general audiences. We do not knowingly collect personal information from children beyond what is needed for an account, and we encourage parents to supervise younger learners.

Data security and retention

Passwords are stored as salted hashes. Scan samples are AES-256-GCM encrypted at rest, outside the public web directory, and deleted after 30 days. Abuse logs are rotated and expire automatically. We do not sell or rent any data.

Your choices

Browse without an account — most of the site works anonymously.
Opt out of personalized ads via Google Ads Settings.
Request removal of your account data or a public report by contacting us — see below.

Contact

Questions about this policy, or requests to access or delete your data: [email protected], or the forum. See the contact page for details.

Changes

If this policy changes, the "last updated" date above will change. Continuing to use the site after a change means you accept the updated policy.

← Back home · About · Contact