Privacy Policy

1. Data we collect

When you create an account, we store your name and email address. When you submit an abuse report, we store the reported IP address, category and your comment. For server security and abuse prevention, we keep short-lived access logs containing visitor IP addresses.

When you subscribe to the CVE bulletin we store only your email address, your language, the date you signed up and the IP address the request came from. The subscription is double opt-in: until the address is confirmed, nothing but the confirmation email is ever sent to it. Every bulletin carries a one-click unsubscribe link, and once used, nothing is sent to that address again. Bulletin addresses are never shared with third parties or used for advertising.

2. How we use data

Collected data is used to provide the service, verify your account, enforce API usage limits, and protect the platform from abuse. How often an IP address is looked up through the API is kept only as an aggregate count, never tied to the key or account that asked; it decides which profile pages are refreshed and announced to search engines first, and is not published anywhere. We do not sell your personal data. The data shared with Google as part of the analytics and advertising services used on this site is described separately in section 4.

3. Cookies and local storage

This site uses three kinds of cookies and browser storage:

• Necessary: cookies for session management and form security (CSRF), plus local storage (localStorage) to remember your theme preference. These are required for the site to work and are not subject to consent.
• Analytics: Google Analytics 4, loaded through Google Tag Manager, uses cookies to measure visitor numbers and page performance.
• Advertising: Google AdSense and its advertising partners use cookies to serve ads, cap how often you see them, and measure their performance.

4. Advertising and third-party services

This site serves ads through Google AdSense. Google and its partners use cookies to do so; personalized advertising may draw on your browsing history on this and other sites. For details on how Google uses data in advertising, see policies.google.com/technologies/ads.

We use Google Analytics 4 for traffic measurement; Google's privacy policy is at policies.google.com/privacy.

You can manage the ad preferences on your Google account at myadcenter.google.com, and third-party advertising cookies at youronlinechoices.com.

5. Your consent choices

Visitors in the European Economic Area, the United Kingdom and Switzerland are shown a consent message through a Google-certified consent management platform (CMP). Analytics and advertising cookies are not set until you consent; this is implemented technically with Google Consent Mode v2.

You can withdraw or change your consent at any time by clicking Cookie settings at the foot of any page.

Outside those regions, analytics and advertising cookies are enabled by default. You can block or delete them in your browser settings.

6. Data retention

Account data is retained for as long as your account is active. Upon account deletion, your personal data is removed within a reasonable period; community reports may be retained in anonymized form for security purposes.

7. Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to access, rectify, erase and port your data, as well as the right to object to processing. Send requests to info@ip-db.com.

8. Contact

For privacy questions: info@ip-db.com