Exploits-DB.com ("we," "our," or "us") is operated by Garnet Grid Consulting LLC. This policy explains what we collect when you use exploits-db.com, who we share it with, and what you can do about it.
What We Collect
Nothing, to browse
The CVE index is a public reference archive. You do not need an account, and we do not ask you to identify yourself, to read any of it. We do not build advertising profiles from your searches.
Your email address, only if you give it to us
If you submit the watchlist or contact form, we receive the email address you type and any message you include. It is sent to our own API at api.garnetgrid.com and used to reply to you or to send the updates you asked for. You can unsubscribe at any time, and you can ask us to delete it.
No payments are taken on this site
There is no paid tier on exploits-db.com and nothing to buy here, so we do not collect billing details or card numbers on this domain at all. If that ever changes, this policy will say so before it does.
Aggregate traffic measurement
We use Cloudflare Web Analytics, which is privacy-preserving: it sets no tracking cookie, does not fingerprint visitors, and reports only aggregate figures such as page views and approximate region. We do not use Google Analytics on this site.
Advertising and Google AdSense
This site is ad-supported and participates in Google AdSense. Where ads are shown, Google and its partners may use cookies and device identifiers to serve and measure ads, including personalised ads based on your prior visits to this and other sites.
- Opt out of personalised advertising in Google's Ad Settings or at aboutads.info.
- Google's use of advertising cookies is described in Google's advertising policy.
Cookies
We set no cookies of our own for tracking. The cookies you may encounter here come from Google AdSense, as described above. You can block or delete cookies in your browser settings; the CVE index will still work.
Third-Party Services
- Google AdSense — display advertising
- Cloudflare — hosting, CDN, security, and privacy-preserving analytics
Data Retention
Email addresses are kept until you ask us to delete them or unsubscribe. Aggregate analytics contain no personal identifiers and are not tied to you.
Your Rights
To access, correct, export, or delete your data, email [email protected]. Depending on where you live you may have further rights:
- EEA/UK (GDPR): access, rectification, erasure, restriction, portability, and the right to object. You may also complain to your local data protection authority.
- California (CCPA/CPRA): the right to know, to delete, and to opt out of the sale or sharing of personal information. We do not sell personal information.
Data Security
The site is served over HTTPS and sits behind Cloudflare. No method of internet transmission is completely secure, so we cannot guarantee absolute security — but we will notify affected users of a breach involving personal data as required by law.
Children's Privacy
This site is a professional security reference and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.
Changes to This Policy
We may update this policy. The revised "Last updated" date at the top marks any change, and material changes will be announced more prominently.
Contact
Privacy questions: [email protected]
Garnet Grid Consulting LLC