Privacy Policy
Last updated: January 2026
Introduction
Threats.watch ("we," "our," or "us") is a non-commercial public interest research database. This Privacy Policy explains how we collect, use, and protect information when you use our website.
Because we are a non-commercial site, we do not collect data for advertising purposes and do not sell or share your information with third parties for marketing.
Information We Collect
Information You Provide
When you submit information through our forms, we collect:
Email address (required for submissions and disputes)
Name (optional)
Submission content (entity information, dispute details, sources)
Information Collected Automatically
When you visit our site, we automatically collect:
IP address (for security and rate limiting)
User agent string (browser and device information)
Cloudflare Turnstile data (device fingerprinting for bot protection)
How We Use Your Information
| Data Type | Purpose |
|---|---|
| Email address | Respond to submissions and disputes; communicate about your request |
| Submission content | Process and potentially publish submitted information |
| IP address | Security, rate limiting, abuse prevention |
| Device information | Bot protection, site functionality |
Third-Party Services
We use the following third-party services to operate this site:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare | CDN, DDoS protection, Turnstile bot protection | Link |
| Vercel | Website hosting | Link |
| Supabase | Database hosting | Link |
| Algolia | Search functionality | Link |
Cookies
We use only essential cookies required for site functionality. We do not use cookies for tracking or advertising purposes. Essential cookies include:
Authentication cookies (for admin access only)
Cloudflare security cookies
Data Retention
We retain different types of data for different periods:
Submission data: Retained until the submission is processed, then archived for legal compliance purposes
Dispute data: Retained for the duration of the dispute process plus 7 years for legal records
Server logs: Retained for 90 days
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access: Request a copy of personal data we hold about you
Correction: Request correction of inaccurate personal data
Deletion: Request deletion of your personal data (subject to legal retention requirements)
Portability: Request your data in a portable format
To exercise these rights, contact us at privacy@threats.watch.
Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), secure database hosting, and access controls. However, no method of transmission over the Internet is 100% secure.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
Contact
For privacy-related questions or to exercise your rights, contact us at privacy@threats.watch.