Data protection

Controller: Schell Consult Sàrl, Route de Cossonay 9, CH-1303 Penthaz · info@schell-consult.ch

Principle

VulnAway processes the strict minimum of personal data required to deliver the service. No advertising, no third-party trackers, no data sold or shared with third parties.

Data processed

• Account: e-mail address, password (hashed with Argon2id), language, chosen watch queries (vendor/software).
• Technical logs: IP address and access logs, kept for security purposes only (abuse prevention, fail2ban).
• Audience statistics: via Umami, self-hosted on our own infrastructure, without cookies and without personal identification (aggregated, non-intrusive metrics).

Cookies & third parties

No advertising or tracking cookies. Only a technical session cookie is used once you log in. No redirection to or embedding of external services, except our self-hosted Umami instance.

Purpose & legal basis

Data is processed to provide the CVE watch service (contract performance) and to secure the platform (legitimate interest), in accordance with the Swiss FADP and, where applicable, the GDPR.

Retention

Account data is kept while your account is active. Security logs are rotated automatically. Deleting your account removes the associated personal data.

Your rights

You may request access, rectification or deletion of your data at any time via Contact.