Updated 28 September 2026
Who is responsible
ScaryByte develops and operates Kestrel.ICU and is responsible for personal information collected through this site.
What is collected
The public site collects the server logs needed to run and protect it: time, address, and browser. It does not run an advertising tracker, and it does not ask you to create an account.
Why
Server logs are used to run and protect the site.
Do not send secrets, credentials, or special-category personal information to this site. The rules of engagement, if you proceed, are the place for precise target lists.
Who else sees it
ScaryByte staff who handle an engagement. Hosting providers that run the site. Information is not sold.
Evidence and messages that belong to an engagement are visible to that engagement and to ScaryByte. They are not published.
How long
Server logs are kept as long as needed to run and protect the site.
To ask for correction or closure, contact ScaryByte through the engagement. Some records of a completed engagement may be kept because the work itself has to remain explainable.
South Africa and POPIA
If the Protection of Personal Information Act applies to you, you may ask whether we hold personal information about you, ask for correction, or object to processing that is not required to perform a contract or to meet a law. Contact ScaryByte through the engagement.

