STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.

Privacy Policy

Effective date: April 17, 2026

At a glance

  • No account required to browse STIGhub. There is no sign-up, no password, no email list.
  • We do not sell, rent, or share your data with advertisers.
  • The AI chat assistant sends your message to Anthropic, our AI provider, but we do not store your chat messages on our servers.
  • We use Google Analytics 4 to measure aggregate site usage.

Who we are

STIGhub is operated by Beacon Cloud Solutions, Inc., a United States corporation headquartered in California. You can reach us at the address in the Contact section at the bottom of this page.

This policy applies to the stighub.com website and any related services we provide under the STIGhub name. STIGhub is intended for users in the United States.

What we collect

AI chat assistant

Messages you type into the chat assistant, along with the path of the page you are viewing (used as context), are sent to Anthropic's Claude API to generate a response. We do not store your chat messages on our servers. Anthropic retains API traffic for up to 30 days for trust-and-safety purposes as described in their terms.

Usage analytics

We use Google Analytics 4 to measure aggregate site usage — page views, navigation, and general device and browser information — to understand how STIGhub is being used. GA4 sets _ga and _ga_* cookies. Unlike the older Universal Analytics, GA4 does not store IP addresses; it uses them only transiently for coarse geographic lookup and discards them afterward. You can opt out using the Google Analytics Opt-out Browser Add-on or your browser's tracking-prevention setting.

Server logs and rate limiting

Our servers record standard web-request metadata (IP address, user-agent, request path, referrer, timestamp) for the purpose of operating the service, diagnosing errors, and applying rate limits on expensive endpoints such as the chat API. Server logs are retained for a limited period — typically on the order of days to weeks at current traffic levels — and are rotated out automatically by our container runtime once a per-service size cap is reached. Maximum retention is bounded by that size cap combined with the rate at which new requests are logged. The chat rate limiter holds IP addresses in memory only for the rate-limit window; they are not written to a database.

Local browser storage

STIGhub stores your light/dark theme preference in your browser's localStorage under the key stighub-theme. This value never leaves your browser and is not a cookie.

What we do not collect

  • We do not require accounts, email addresses, or passwords for browsing.
  • We do not store your chat messages on our servers.
  • We do not sell, rent, or share your personal information with data brokers.
  • We do not serve advertising.

Service providers we rely on

The following third parties process data on our behalf:

  • Anthropic PBC — processes chat messages via the Claude API to return model responses. See Anthropic's Privacy Policy.
  • Google LLC — operates Google Analytics 4 for aggregate usage measurement. See Google's Privacy Policy.
  • Amazon Web Services — provides U.S.-based hosting infrastructure (compute, DNS, object storage, container registry).

Data retention

  • Chat messages: not retained by us. Anthropic retains API traffic for up to 30 days per their terms.
  • Server logs: rotated at a bounded per-container size cap; typical retention is days to weeks at current traffic levels.
  • Google Analytics event data: retained per GA4 settings (14 months by default).

Your choices

You can stop using STIGhub at any time. To request access to, correction of, or deletion of information associated with you, email us at info@beaconcloudsolutions.com.

California residents

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we have collected, the right to delete it, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA. We will not discriminate against you for exercising these rights. To make a request, email us at the address above.

Security

All traffic to STIGhub is encrypted in transit using TLS. Our infrastructure is hosted in AWS with standard cloud security controls. No system is perfectly secure, and we make no claim of any specific certification, accreditation, or compliance boundary for STIGhub itself. Do not upload classified, controlled-unclassified, export-controlled, or other sensitive information you are not authorized to process through a commercial third-party service.

Children

STIGhub is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent change. For material changes, we will make reasonable efforts to provide notice on the site.

Contact

Beacon Cloud Solutions, Inc.
10801 Thornmint Rd, Suite 200
San Diego, CA 92127
info@beaconcloudsolutions.com

Terms of UseAbout STIGhub