Privacy
Last updated 7 November 2026
Short version: no accounts, no cookies, no analytics, no tracking. Your settings stay in your own browser. To show live data, your browser talks directly to a few public services, listed below.
What this site collects
Nothing, on purpose. There's no sign-up, no contact form, no analytics script, no advertising and no cookies. This site has no backend or database of its own, so there's nowhere for your data to go.
What's stored in your browser
The site uses your browser's localStorage to remember your settings between visits.
It stays on your device and is never sent back to this site.
| Item | What it's for |
|---|---|
| Watchlist | The vendors and products you added under "Your stack". |
| Watchlist cache | Recent lookup results for each watched vendor, kept for up to an hour so the page loads faster. |
| NVD API key | Only if you enter one. Sent only to NVD, with your watchlist and feed requests. |
| Severity filter | Which severity filter you last picked on the feed. |
| Sound setting | Whether you turned sound effects on. |
You can delete all of it at any time:
Services your browser connects to
To show live data, your browser fetches it directly from the services below. Like any website, they receive your IP address and browser details when it does, and their own privacy policies apply.
| Service | Why | What they see |
|---|---|---|
| Cloudflare | Hosts and delivers this site | Your IP address, browser details and the pages you visit (see Hosting below) |
| NVD (US NIST) | CVE details, scores, and the 24-hour feed | Your IP address, the vendor and product names on your watchlist (as search terms), and your API key if you set one |
| GitHub | The latest CVE records from CVE.org and the CISA KEV list, both hosted on GitHub | Your IP address |
| Google Fonts | The fonts used on the page | Your IP address |
A note for work use: your watchlist effectively describes what software your organisation runs. It stays in your browser, but each item is sent to NVD as a search when the page looks it up. If that's sensitive for you, keep the watchlist generic or leave it empty.
Links to NVD, CVE.org, CISA and LinkedIn are ordinary links. Nothing is sent to those sites unless you click one.
Hosting
This site is hosted on Cloudflare. Every visit goes through Cloudflare's network, which handles your IP address, browser details and the pages you request in order to deliver the site and protect it from abuse. Cloudflare may keep this in short-term logs. This site doesn't use those logs to identify anyone. See Cloudflare's privacy policy for how they handle it.
Contact
Questions about this page? Message me on LinkedIn.