Privacy
What we collect, and what we do not.
Last updated 31 July 2026
Two things happen on this site. If you send a consultation request, we receive what you type and use it to reply. Separately, an analytics tool records how visitors move through the page so we can improve it — and we have configured it so that what you type into the form is never recorded. Nothing on this site is sold to anyone.
Who this is
BUGHUNT is the technical surveillance countermeasures practice of Empire Investigation LLC, which operates this site at tscmguru.com and is responsible for the information described here. You can reach us at intake@areyoususpicious.com for anything on this page, including a request to delete your information.
What you send us
The consultation form asks for a name or initials, an email address, and optionally a phone number, a city or region, the type of environment concerned, a timeline, and a free-text description of what prompted the concern. You also confirm that you understand the form sends us a message.
We use it only to respond to your enquiry and to carry out any engagement that follows. We do not add you to a marketing list from this form, and we do not pass your enquiry to anyone outside Empire Investigation LLC and the service providers listed below without your instruction.
If you would rather not use the form, email us directly. If you believe the device you are using may be monitored, use a different device or a trusted person's phone.
What is collected automatically
We use Microsoft Clarity to see which parts of the page people read, where they stop, and where the page confuses them. Clarity records page views, clicks, scrolling and mouse movement, approximate location derived from your IP address, and your device and browser type. It also records a replay of the session.
We have configured Clarity to mask the consultation form, so the text you type into it is not captured in those recordings. Microsoft processes this data on our behalf and may combine it with its own data, including Bing, for its purposes. Their handling is governed by the Microsoft Privacy Statement.
The typefaces on this page are served by Google Fonts, which means your IP address reaches Google when the page loads.
Cookies and similar storage
This site sets no cookies of its own. The following are set by the analytics described above.
| Name | Set by | Purpose |
|---|---|---|
| _clck, _clsk | Microsoft Clarity | Recognises a returning browser and ties page views into one session. |
| _cltk | Microsoft Clarity | Session storage, cleared when you close the tab. |
| CLID, SM | clarity.ms | Identifies the browser to the Clarity service. |
| MUID, MR, SRM_B | bing.com | Microsoft identifiers shared between Clarity and Bing. These are advertising identifiers, and this is the one item on this page that may amount to sharing information for cross-context advertising. |
You can refuse or delete these in your browser settings, and Microsoft offers a general opt-out at choice.microsoft.com. Refusing them does not affect the form or any part of the site.
Who else handles it
- Netlify — hosts this site and receives form submissions before they reach us.
- Microsoft — analytics and session replay, as described above.
- Google — serves the typefaces, and so receives your IP address.
We do not sell personal information for money. The Microsoft and Bing identifiers above may nonetheless count as sharing for cross-context behavioural advertising under California law. If you would like us to stop that for your visit, email us and we will exclude you, or block the cookies in your browser, which achieves the same thing immediately.
How long we keep it
Enquiries and any engagement records are kept for as long as we may need them to act for you, to answer questions afterwards, and to meet our legal and professional obligations. Analytics data is retained by Microsoft under Clarity's own retention schedule, which is currently just over a year.
Your rights
Wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing intake@areyoususpicious.com. We will not treat you differently for asking.
If you are in California, that includes the rights to know, delete, correct, and to opt out of sharing, and you may use an authorised agent. If you are in the UK or the EU, it also includes the right to object, to request portability, and to complain to your supervisory authority.
Confidentiality
Beyond anything required by data protection law, enquiries to this practice are handled on a need-to-know basis. We do not confirm the existence of an engagement to third parties, and we do not discuss a matter with anyone you have not approved.
Children
This site is intended for adults and is not directed at children. We do not knowingly collect information from anyone under 16.
Changes
If we change what we collect or who processes it, we will update this page and the date at the top of it.