Privacy Policy

Last updated: 27 September 2026

Exploit-DB.ai (exploit-db.ai) is operated by Garnet Grid Consulting LLC. It publishes CVE and public exploit information with AI-generated risk scoring. This policy explains what we collect.

No Account, No Tracking Profile

You can search and read everything on this site without an account. We do not set advertising cookies, we do not run advertising trackers, and we do not build a profile of you across sites.

Analytics

We use Plausible for aggregate analytics. Plausible is cookieless and does not collect or store personal data or cross-site identifiers. It tells us how many people viewed a page and roughly where in the world they were, and nothing that identifies an individual.

What We Do Collect

Your Email Address, If You Give It

If you submit a form to hear about updates or to contact us, we receive the email address you type. We use it to reply and to send occasional updates, and you may ask us to remove it at any time.

Server Logs

Cloudflare serves this site and keeps standard request logs (IP address, user agent, requested path) for security, rate limiting, and abuse prevention.

What We Never Do

• We do not sell personal information
• We do not share your email address with advertisers or data brokers
• We do not log your search queries against your identity

Third-Party Services

• Plausible — cookieless aggregate analytics
• Cloudflare — hosting, CDN, and security

Your Rights

To access, correct, or delete your personal data, contact us at [email protected].

Depending on where you live, you may have additional rights under applicable privacy law:

• California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
• EEA/UK residents (GDPR): you have the right of access, rectification, erasure, restriction of processing, and data portability, and the right to object to processing. You may also lodge a complaint with your local data protection authority.

Data Retention

Aggregate analytics are retained in aggregate form only and cannot be traced to an individual. Email addresses are kept until you ask us to remove them.

Children

This site is a professional security reference and is not directed at children. We do not knowingly collect personal information from anyone under 13.

Security

Traffic to Exploit-DB.ai is served over HTTPS. Payment card details are handled by Stripe and never reach our servers. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we limit what we collect in the first place.

Changes to This Policy

We may update this policy. The revised version is posted at this URL with a new effective date. Material changes are announced on the site, and by email where we hold an address for you. Continuing to use the site after an update means you accept it.

Contact

Questions about this policy, or a request about your data: [email protected]
Garnet Grid Consulting LLC