Privacy
opsec.101 is a one-person project run from Sweden. This page says what this website, the newsletter and our Instagram messages store, and how to get it removed.
This website
No cookies, no trackers, no analytics. The "what this page knows about you" box is worked out on your phone and sent nowhere. Our server (HostUp, Sweden) keeps standard access logs (IP address, page, browser) for about 10 days, for security. Cloudflare passes the traffic on as our network provider.
Newsletter
What we store: your email address, the page you signed up from, when you signed up, which version of the consent text you ticked, the result of the mailbox check below, a random code that makes your own confirm and unsubscribe links work, when the confirmation email was sent, when you confirmed, and which newsletters were sent to you.
Mailbox check: a new address is checked with BounceZero to see that the mailbox exists. BounceZero is a separate email-verification service: it receives the address for that check and may process it outside the EU (we don't control where). Nothing else is shared with BounceZero, and the address is shared with no one else apart from Cloudflare, which keeps the list, and Purelymail, which delivers our emails (see "Where"). An address that can't receive email is turned away and not saved.
What happens next: the guide (or, from the home page, the list of guides) opens on screen right away. Within about an hour you get one confirmation email from hello@nooffen.se. Nothing else is sent unless you click the link in it. Addresses that aren't confirmed are deleted 30 days after that email.
What we don't store: your IP address, your name or your browser. Our emails have no tracking pixels and no tracked links, so we can't see whether you open or click anything. The only link in them that is personal to you is your own confirm or unsubscribe link.
Why: to send you what you asked for: new guides and kits, a few emails a month at most. The legal basis is your consent (GDPR article 6(1)(a)), which you can take back at any time.
Where: the list is in a Cloudflare database kept in the EU (Cloudflare, Inc. processes it for us). The sign-up form talks only to Cloudflare, which asks BounceZero about new addresses; it never reaches our own servers. Emails are sent through Purelymail (Purelymail LLC, United States), our email provider, which processes your address to deliver each email; like any email account, it keeps a copy of sent mail in our mailbox.
How long: until you unsubscribe or ask us to delete it, or 30 days after the confirmation email if you never confirm. Then the address and everything stored with it are deleted from the list. Copies of emails already sent stay in our mailbox at Purelymail until we delete them.
Your rights: you can ask for a copy, a correction or deletion, and object to how we use your data. You can also complain to the Swedish data protection authority, IMY (imy.se).
Instagram messages
What happens: if you comment a guide's keyword (for example BROKERS) under one of our Instagram videos, our software sends you one Instagram message with the link to that guide. You get each guide at most once, and never more than two messages a day.
What we store: your Instagram username and the id Instagram gives your account, the comment's id and text, which video it was on, and whether and when we sent the message. We read comments on our own videos only.
Why: to send the link you asked for by commenting, and to make sure nobody gets the same message twice.
Where and how long: on our own server in Sweden, shared with no one. The comment text is deleted after 90 days and the rest after one year. Instagram (Meta) processes the message as part of its service.
Delete or export your data
Every email, the confirmation email too, has an unsubscribe link at the bottom (mail apps that support it also show their own one-click Unsubscribe button). It deletes your address from the list straight away. For anything else, send a message to @opsec.101 on Instagram with the address or Instagram username in question and the word DELETE. We answer within 30 days.
Updated 2026-10-08