What this notice covers
This notice applies to the public BaitShield website at baitshield.my only: the home page, pricing, live demo and this page.
It does not cover the BaitShield platform itself. If your organisation uses BaitShield to run phishing simulations, the handling of your employee data is governed by the agreement between your organisation and Mesiniaga Berhad, and your organisation is the data controller for that information. Speak to your own administrator or security team about it.
Who we are
BaitShield is a product of Mesiniaga Berhad, a company incorporated in Malaysia and listed on Bursa Malaysia. For anything in this notice, contact [email protected].
What we collect on this website
We keep this deliberately small. On the public website we collect:
- Analytics about page visits — which pages are viewed, roughly where in the world the visit came from, the type of device and browser, and which site referred you.
- Anything you type into a form — currently only the waitlist form, which asks for your name, work email and organisation. We use it to contact you about BaitShield availability and nothing else.
- Standard server logs — your IP address, the time of the request and the page requested, kept for security and troubleshooting.
We do not sell personal data, and we do not run advertising or ad-targeting on this website.
Cookies and similar technologies
Analytics cookies are switched off until you accept them. When you first visit, a banner asks for your choice; until you accept, Google Analytics runs in a cookieless mode that stores nothing on your device.
| Name | Type | Purpose | Set when | Expires |
|---|---|---|---|---|
_ga, _ga_ZY2N41WT2F |
Cookie | Google Analytics 4. Tells repeat visits apart so we can count unique visitors. | Only after you press Accept | Up to 2 years |
| (none) | Umami | Self-hosted visit counting. Cookieless: it stores nothing on your device and does not track you across sites. | Always | n/a |
bs_consent_analytics |
Local storage | Remembers your cookie choice so we stop asking. | When you answer the banner | Until you clear it |
bs_landing_theme |
Local storage | Remembers light or dark mode. | When you switch theme | Until you clear it |
pg_session |
Cookie | Keeps you signed in. Strictly necessary, so it is not covered by the banner. | Only if you sign in | Session / sign-out |
If you accept, we also enable session replay through our self-hosted Umami instance, which records how pages are scrolled and clicked so we can find usability problems. It is not enabled unless you accept. We do not run session replay on the sign-in page at any time.
Who we share it with
- Google (Google Analytics 4) — only once you have accepted analytics cookies. Google processes this data on our behalf and may do so outside Malaysia.
- Cloudflare — sits in front of this website to protect it and serve it quickly, and processes request metadata in doing so.
- Umami — our own self-hosted analytics instance. The data stays with us.
We do not share website analytics with anyone else.
Your choices
- Change your cookie choice at any time — reopen the cookie banner. Declining stops analytics cookies and session replay.
- Clear what is already stored — clear cookies and site data for baitshield.my in your browser settings.
- Browser signals — we honour Global Privacy Control and Do Not Track where your browser sends them.
Under Malaysia's Personal Data Protection Act 2010 you may ask what personal data we hold about you, ask us to correct it, or ask us to stop using it. Email [email protected] and we will respond within 21 days. If you are in the UK or EEA, the equivalent GDPR rights apply.
How long we keep it
- Google Analytics data: 14 months, then deleted automatically.
- Umami analytics: 12 months.
- Waitlist submissions: until BaitShield becomes generally available, or until you ask us to remove you.
- Server logs: 90 days.
Changes to this notice
If we change how we use data on this website we will update this page and move the date at the top. Material changes to analytics will reset the cookie banner so you can make a fresh choice.
Contact
Mesiniaga Berhad
Email: [email protected]
Parent company website: mesiniaga.com.my