Privacy Policy

What we collect

• Email address — if you subscribe to the newsletter or enter it on the audit page. Used only to send the weekly digest and score-drop alerts you opt into.
• Anonymised IP hash — SHA-256 of your IP + a rotating salt. Used only for rate limiting. Not reversible to your IP address. Rotated every 24 hours.
• Audit inputs — run_loops and tool selections you enter in the audit tool. Stored to compute aggregate waste statistics. Never tied to an identity.
• Affiliate click — timestamp, target tool, and report_id. No personal data. Used to measure which tools generate deployment traffic.

What we don't collect

• No cookies. No third-party tracking pixels. No advertising IDs.
• No device fingerprinting beyond the rate-limit IP hash.
• No account creation. No passwords. No payment data processed by us.

Third-party services

• Cloudflare — hosts the Worker and Pages. Subject to Cloudflare's privacy policy.
• Beehiiv — newsletter delivery. Your email is transferred to Beehiiv when you subscribe.
• OpenAI — audit queries are sent to OpenAI's API for analysis. Governed by OpenAI's data usage policy.
• GitHub — all tool data is scraped from public GitHub repositories. No personal data from GitHub users is stored.

Data retention

Newsletter subscribers: until you unsubscribe. Audit records: 90 days. IP hashes: 24 hours. Affiliate clicks: 12 months.

Your rights

To delete your email from our records, email privacy@verditnxtgen.com. We'll confirm deletion within 48 hours. Anonymised aggregate stats are not deletable as they contain no personal data.

Contact

privacy@verditnxtgen.com