Privacy Policy
Effective date: September 2026 Operating entity: Endpoint Index Media Contact: [email protected]
Who we are
EndpointIndex (endpointindex.com) is an independent editorial database of endpoint-security products operated by Endpoint Index Media.
What data we collect
Site visitors
EndpointIndex uses Plausible Analytics, a privacy-focused, cookieless analytics service. No personal data, cookies, or fingerprints are collected. Plausible is GDPR, CCPA, and PECR compliant by design.
Report-an-error form
When you submit a correction via the "Report an error" link, your email address and the content of your message are sent to [email protected]. We use this data solely to investigate and resolve the reported issue. We do not add your email to any mailing list. Corrections are retained for as long as the relevant entity data exists in the database.
Vendor enquiry form
When you submit a vendor enquiry via /vendors/ or [email protected], we collect your name, email, company name, and the content of your message. This data is used solely to process your enquiry (profile claims, corrections, or sponsorship requests). We do not share vendor contact details with third parties.
Affiliate links
Some entity pages contain affiliate links to vendor websites. These links are labelled and carry rel="sponsored nofollow". When you click an affiliate link and make a purchase, the affiliate network (e.g. CJ Affiliate, Impact, PartnerStack) may set cookies on the vendor's domain to track the referral. EndpointIndex does not set cookies on your device as part of this process. See About for our affiliate disclosure.
Sponsorship
Vendors may purchase labelled "Featured" placement on category pages. Sponsored placements are always visually distinct and labelled. Sponsorship never affects data, scores, rankings, or editorial judgments. See For Vendors for sponsorship details.
Data processors
| Processor | Purpose | Data involved |
|---|---|---|
| Cloudflare | Hosting, CDN, DDoS protection | IP addresses (server logs, retained per Cloudflare policy) |
| Plausible Analytics | Privacy-focused web analytics | No personal data — aggregate page views only |
| Email provider | Receiving corrections and vendor enquiries | Sender email, message content |
Data retention
- Analytics: Plausible retains aggregate, non-personal data indefinitely. No personal data is collected.
- Corrections: Retained for as long as the entity data is in the database, then deleted.
- Vendor enquiries: Retained for the duration of the business relationship, then deleted within 12 months of last contact.
Your rights
If you have submitted personal data via the correction or vendor forms and wish to exercise your rights under GDPR, CCPA, or equivalent legislation (access, correction, deletion, portability), contact [email protected].
Changes
We may update this policy. Material changes will be noted on this page with an updated effective date.