Privacy Policy

1. Who we are

This policy explains how Dark Networks LLC ("Dark Networks", "we", "us"), an Idaho limited liability company, handles personal information collected through our web properties: the darknt.com website (served at the apex and www), our marketing landing pages, and our customer account surface.

• Registered agent address: 784 S. Clearwater Loop, Ste. R, Post Falls, ID 83854-9599
• Office: 1846 1st St. PMB 1035, Idaho Falls, ID 83401
• Privacy contact: privacy@darknt.com

2. Scope

This policy covers the personal information we collect through our websites, marketing pages, and customer account surface - both what you give us through contact and marketing forms and through account creation, and what is collected automatically as you browse or sign in (sections 3 and 6). It does not cover data you provide through other channels (email, phone, contracts) except where that data originates from a website submission or account interaction.

3. What we collect, and how

3.1 Information you give us through our forms

When you submit the contact form, we collect the fields you enter:

• First name and last name
• Work email address
• Company
• What you're working on (the optional free-text message field)

When you book a call through our booking form, we collect the same categories (name, work email, company, and an optional note) and use them to create the appointment and send you a calendar invitation (section 7).

The contact form on this site does not ask for a phone number. Where one of our intake channels or marketing pages does collect a phone number and you opt in to calls or text messages, U.S. calling and texting rules apply - see section 8.

3.2 Information collected automatically when you submit

To record and secure each submission, our systems also capture:

• Your IP address, used for spam and abuse prevention and recorded with the submission
• The page URL the form was submitted from
• A record of consent: the exact consent text shown to you, a consent-policy version identifier, and a timestamp of your submission
• A bot-check result from our anti-abuse provider (section 5)

A hidden anti-spam field ("honeypot") is included in our forms; it is not visible to you and is used only to discard automated submissions.

3.3 Information collected automatically as you browse

When analytics or visitor tracking is active and you have not opted out (section 6), our analytics and visitor-tracking tools automatically collect information about your visit: pages viewed, the referring page, campaign (UTM) parameters, approximate location at a city/country level, browser and device type, and cookies and similar identifiers (including a persistent random identifier stored in your browser's local storage). Through Apollo's identity partner LiveIntent (section 6), we may also receive hashed email identifiers associated with your browser from that partner's identity network. Section 6 describes each tool, what it sets, and how to turn this collection off.

3.4 What we do not collect

We do not knowingly collect special-category or sensitive personal data, payment card data, or government identifiers through our websites. Please do not include such information in free-text message fields.

3.5 Information collected when you create and use an account

If you create a customer account, we collect:

• Email address and display name - the only personal information we ask for at sign-up.

Your account is maintained in a customer identity directory operated by Microsoft (Entra External ID), which also stores your authentication state (such as password hash and passkey registrations). We do not have access to your password.

When you sign in, our systems record:

• A session cookie set by the hosting platform to maintain your authenticated session, and a non-authoritative companion cookie that tracks when your session started (used for session-expiry awareness on the account page).
• An audit event recording the action taken (such as sign-in, profile update, or account deletion), keyed to an opaque account identifier (not your email or name), a timestamp, and your IP address redacted to a /24 prefix (the last segment is replaced with zero). Audit events contain no other personal information.
• A profile record in our systems containing your display name and the timestamp of your most recent sign-in, keyed to the same opaque identifier.

4. Why we use your information

• Responding to you: to respond to your inquiry and provide the services or information you request.
• Security: to prevent spam, fraud, and abuse of our forms (IP address, bot check, honeypot).
• Record keeping: to keep a record of the consent shown at submission.
• Marketing: to contact you about services relevant to your inquiry, on the opt-out basis described in section 8.
• Site measurement and marketing analytics: to understand how our sites are used and to identify and reach business audiences, using the analytics and visitor-tracking tools described in section 6.
• Account services: to create and maintain your customer account, authenticate your sign-ins, and provide account-related features such as profile management and account deletion.
• Audit and abuse prevention: to maintain a security audit trail of account-related actions for abuse detection, incident investigation, and compliance, using the minimized audit events described in section 3.5.

We do not sell or rent your personal information for money. Some disclosures to the advertising and identity partners described in section 6 could be considered a "sale" or "sharing" of personal information under the broad definitions in some state privacy laws; you can opt out of both, as described in sections 6 and 9.

5. Anti-abuse / bot protection (Cloudflare Turnstile)

To protect our forms from automated abuse, we use Cloudflare Turnstile. When you submit a form, a verification token and your IP address are sent to Cloudflare for a bot/human assessment. Per Cloudflare, Turnstile is designed to be privacy-preserving: it does not use cookies, and the signals it processes are described by Cloudflare as strictly necessary for bot detection and not used for advertising or cross-site tracking.

6. Cookies, analytics, and tracking

Analytics differ across our web properties, and we disclose all of them here:

• This website uses Cloudflare Web Analytics, a cookieless, privacy-first analytics service. It sets no cookies, does not fingerprint individual visitors, and does not track you across sites; Cloudflare collects aggregate page-view metrics (page URL, referrer, browser and device type, country) on our behalf.
• This website also uses Google Analytics 4 (GA4), a service of Google LLC, to measure how the site is used (pages visited, approximate location at a city/country level, browser and device type, and how you arrived at the site). GA4 sets first-party analytics cookies (such as _ga) to distinguish visitors and sessions. We have enabled Google Signals and linked our Google Ads account with ads personalization: Google may combine this measurement data with information from the Google accounts of signed-in users who have Ads Personalization turned on, and we may use it for advertising audiences, ads personalization, and cross-device reporting. We also share GA4 data with Google under Google's account data-sharing settings (Google products and services, benchmarking, technical support, and Google account specialists). On our configuration, Google retains GA4 event-level data for 2 months from collection and user-level data for 14 months from your last visit. Because of these advertising features, this use may be considered "sharing" of personal information for cross-context behavioral advertising under some state privacy laws - see section 9 for your opt-out rights.
• This website and our marketing landing pages use Apollo.io for visitor tracking (and, on the marketing pages, form processing) in support of our sales and marketing. On this website, the Apollo tracker records page visits, the referring page, and campaign (UTM) parameters, and stores a persistent random identifier in your browser's local storage to recognize return visits. It also works with Apollo's identity partner LiveIntent, which may set cookies and similar identifiers and attempt to associate your visit with hashed (obfuscated) email identifiers so Apollo can relate the visit to a business contact. Visitor tracking also ran on the previous darknt.com website until August 12, 2026.

You can turn GA4 and the Apollo tracker off. This site honors the Global Privacy Control (GPC) signal: if your browser or a browser extension sends GPC, neither GA4 nor the Apollo tracker is loaded and no analytics cookies or tracking identifiers are set by them; the opt-out setting in our preferences modal is then locked on and cannot be overridden from this site. You can also use the "Your Privacy Choices" control in our footer and below - it opens a preferences modal where you can opt out of "sale," "sharing," and targeted advertising on this browser - block cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Your choice applies to the browser and device you make it on, is stored in the first-party dnx-consent cookie described under "Cookies we use" below, takes effect the next time a page loads, and stops these tools from loading from then on; clearing your browser's cookies resets it. Opting out does not remove data collected before you opted out - to ask us to delete previously collected analytics data, contact privacy@darknt.com (section 9).

Some browsers also offer a "Do Not Track" (DNT) setting. No common industry standard for responding to DNT has been adopted, and we do not respond to DNT signals; we do honor the GPC signal, which we treat as a legally effective opt-out. When the tools above are active, the third parties behind them (Google, and Apollo with LiveIntent) may collect information about your online activities over time and across different websites and services, as described in this section. We will update this policy if the way any of these tools are used materially changes.

Cookies we use

The cookies and similar browser identifiers this website sets or allows are:

• dnx-consent (first-party cookie, strictly necessary): set by this site only when you save a choice in the "Your Privacy Choices" preferences modal, to record whether you have opted out of "sale," "sharing," and targeted advertising. It stores no identifier - only your opt-out state, a timestamp, and a record version - and persists for 12 months from your most recent choice. Because it is how your opt-out is remembered, you cannot opt out of it.
• _ga and _ga_* (first-party cookies, analytics - Google LLC): set by GA4, only while analytics is active (you have not opted out and your browser is not sending GPC), to distinguish visitors and sessions. Per Google's documentation they persist for up to 2 years; server-side retention of the measurement data is described above.
• Apollo visitor identifier (first-party local storage, marketing / visitor identification - Apollo.io): not a cookie, but a persistent random identifier the Apollo tracker stores in your browser's local storage, only while tracking is active, to recognize return visits. Apollo's identity partner LiveIntent may additionally set third-party cookies and similar identifiers, as described earlier in this section.
• dnx-analytics-optout (legacy local storage): an earlier version of our opt-out control stored your choice under this local storage key. If it is present, we read it once, carry the opt-out forward into the dnx-consent cookie, and remove it.
• Account session cookies (first-party, strictly necessary): when you sign in to a customer account, the hosting platform sets the session cookies described in section 3.5 to maintain your authenticated session.

Cloudflare Web Analytics and the Cloudflare Turnstile anti-abuse check are cookieless, as described above and in section 5.

7. Who we share your information with

We share your information with service providers who process it on our behalf under contract and, for the advertising and identity features described in section 6, with third parties:

• Microsoft (Dynamics 365 / Dataverse, Microsoft Azure, Microsoft Entra External ID, and Microsoft 365): your submission is stored as a sales lead record in our Microsoft Dynamics 365 environment; this website and its form-processing service are hosted on Microsoft Azure; customer accounts are maintained in a Microsoft Entra External ID directory (which stores your email, display name, and authentication state); and call bookings are scheduled through Microsoft Bookings, which sends your calendar invitation (with a Microsoft Teams link). Microsoft processes this data as our processor under the Microsoft Products and Services Data Protection Addendum.
• Cloudflare: for the anti-abuse check (section 5) and cookieless web analytics (section 6).
• Google: for Google Analytics 4 on this website, including the Google Signals and Google Ads advertising features and the Google data-sharing settings described in section 6.
• Apollo.io: for visitor tracking on this website and our marketing pages (together with its identity partner LiveIntent, section 6), marketing forms, and sales and marketing operations on lead records. When you submit our contact form, we also send the contact details you enter (first and last name, work email, and company) to Apollo.io to create or update a contact record in our sales and marketing system.

We may disclose information if required by law, or to protect our rights, safety, or property. We do not sell your personal information for money; section 9 describes the advertising-related "sale or sharing" you can opt out of.

8. Marketing communications

If we contact you about our services, every marketing message will identify us and include a way to opt out, and we will honor opt-out requests promptly, consistent with the U.S. CAN-SPAM Act. Marketing operates on an opt-out basis for U.S. business contacts.

Where a phone number is collected through one of our channels and you expressly opt in to receiving calls or text messages, we honor the U.S. Telephone Consumer Protection Act (TCPA): your consent is recorded, it is not a condition of purchase, and you can revoke it at any time (for texts, reply STOP). We do not place automated marketing calls or texts without that consent.

9. Your rights

We extend the following rights to all visitors and account holders in the United States, whether or not a specific state statute applies to us: you may request access to the personal information we hold about you (provided in a portable and readily usable format), ask us to correct it, ask us to delete it, and opt out of marketing at any time.

If you have a customer account, you can exercise several of these rights directly: view your account information on your account page (access), edit your display name (correction), and delete your account (deletion). Account deletion removes your identity from our customer directory and your profile data from our systems. Minimized audit records (section 3.5) are retained for the security-purpose period described in section 10 and are not deleted in response to an account-deletion request because they serve a documented security purpose; they contain only an opaque identifier, not your email or name. For any right you cannot exercise through self-service, or to request a machine-readable export of your data, contact privacy@darknt.com.

California and other state-law residents: we do not sell personal information for money. Our use of the advertising features described in section 6 (Google Signals and Google Ads integration, and Apollo/LiveIntent visitor tracking) may constitute "sharing" of personal information for cross-context behavioral advertising as defined by the CCPA/CPRA, processing for "targeted advertising" as defined by other state privacy laws, or a "sale" under some states' broad definitions. You have the right to opt out of all of these. On this website, we honor the Global Privacy Control signal as an opt-out preference signal, and you can use the "Your Privacy Choices" control in our footer and in section 6 - both open the preferences modal where you can record your opt-out for this browser. For our marketing landing pages, or to opt out everywhere we hold data about you, email privacy@darknt.com - we will apply your opt-out in the systems we control and forward it to the partners involved (you can also use LiveIntent's own published privacy-choices page). We do not knowingly sell or share the personal information of consumers under 16.

We will not discriminate against you for exercising any of these rights. You may designate an authorized agent to submit a request on your behalf; we will ask for proof of the agent's authorization. If we decline to act on a request, we will explain why, and you may appeal by replying to our response or emailing privacy@darknt.com with the subject "Appeal"; we will respond to appeals within 45 days. If your appeal is unsuccessful, you may contact your state Attorney General.

To exercise any right, contact us at privacy@darknt.com. We will verify your request and respond within the timeframe applicable law requires (and in any case within 45 days); where reasonably necessary we may extend once by a further 45 days, and will tell you if we do.

10. Data retention

We keep contact-form submissions and the resulting lead records for up to 24 months after our last contact with you, unless a longer period is required by law or needed for an active business relationship. You can request earlier deletion at any time (section 9). The consent record for a submission is kept as long as the associated lead record.

Analytics and tracking data are retained as described in section 6: on our configuration, Google retains GA4 event-level data for 2 months from collection and user-level data for 14 months from your last visit; identifiers stored in your browser (cookies and local storage) persist until they expire, you clear them, or you opt out; and data held by Apollo.io and its identity partner is retained under their own published policies.

Account data (your email address, display name, and profile record) is retained for as long as your account is active. When you delete your account, your identity is removed from our customer directory and your profile record is deleted from our systems.

Audit records (section 3.5) are retained for 1 year from the date of the event. These records are stored in a write-once archive and serve a documented security purpose (abuse detection, incident investigation, and compliance trail). After the 1-year retention period, audit records are automatically purged. Audit records are not deleted in response to an account-deletion request because of this security purpose, and because they contain only an opaque identifier (not your email or name), their retention does not continue to identify you after your account is deleted.

11. International data transfers

Our websites and account surface are directed at businesses in the United States. Our processors and partners (Microsoft, Cloudflare, Google, Apollo.io) may process data in other countries; where personal data of individuals outside the U.S. is incidentally involved, transfers rely on the mechanisms in our processors' data-protection terms (such as Standard Contractual Clauses).

12. Security

We take reasonable measures to protect the information we collect, including:

• The website and forms are served over HTTPS/TLS, and non-secure requests are redirected to the secure site.
• The form-processing service is not reachable directly from the public internet; requests reach it only through the website front door.
• Our systems authenticate to Dynamics 365 using a managed identity, so no reusable database password is stored in the website or its code.
• Anti-abuse controls (bot check and honeypot) reduce automated misuse.
• Customer accounts require multi-factor authentication from the first sign-in, and support passkey (FIDO2) registration for stronger authentication.
• Account-related secrets (such as identity-provider credentials) are stored in a key vault, not in application code or configuration files.
• The customer identity directory is isolated from our internal systems and is operated by Microsoft under their security controls.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children's privacy

Our websites are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13; if you believe a child has provided us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, take additional steps as required by law.

15. Contact us

Questions or requests about this policy or your personal information:

• privacy@darknt.com
• Dark Networks LLC, 1846 1st St. PMB 1035, Idaho Falls, ID 83401