What the site stores
Your explicit light or dark theme choice is stored locally in your browser. The static site does not receive that preference.
Optional account sign-in
When account sign-in is enabled, Clerk processes the credentials and profile details you submit and uses browser cookies or storage to manage your session. Authentication resources load on the account page, not on public threat pages. Signing in does not subscribe you to marketing emails or activate a paid plan. See Clerk's privacy policy for its processing practices.
Watchlists and requested alerts
Saving a Watchlist stores your Clerk account identifier, selected tags, notification preference, and update time in Cloudflare D1. When you enable eligible email alerts, we verify and store your primary verified Clerk email address. Resend processes the recipient address and alert content to send requested notifications. We retain preferences while you use this feature and delivery records for troubleshooting and duplicate prevention; automatic deletion is not currently enabled. Turning off alerts stops future sends but does not delete existing records. These alerts do not enroll you in a marketing newsletter.
Launch notifications
Register for Team and future product launch notifications. The public database is open; Radar is a separate limited pilot and this list does not reserve a pilot place. Registration requires only your email address; your role is optional and no sign-in is required. Selecting Notify me about Team launches records your consent to receive a confirmation email and, after confirmation, future product launch notifications. This is not a weekly newsletter, does not include paid Radar alerts and does not activate paid access or change an existing subscription.
Cloudflare D1 stores your email address, optional role, consent version and time, and verification status. Resend processes your email address and message content to deliver confirmation emails and future launch notifications. We do not send launch notifications to unconfirmed registrations. The registration form does not put your email in a URL or save it in browser storage.
Confirmation and cancellation links use a token in the URL fragment. The page removes that fragment after reading it and requires an explicit button selection before submitting the action. No signup-page measurement runs on the confirmation or cancellation pages.
You can cancel using the link in our emails. Cancellation stops launch notifications and clears your email address and role from the registration. We retain an email hash to suppress repeated sends, along with consent records and aggregate statistics. Unconfirmed registration data is valid for 30 days; expired data is cleaned up when the API handles traffic, not by a scheduled job, so cleanup may occur later than day 30.
Optional signup-page measurement
The Allow signup-page measurement checkbox on the launch registration page is optional and unchecked by default. Only after you select it do we store a random browser ID and its creation time under launch-measurement-v1 in local storage. The ID is valid for 30 days and is replaced after expiry when you consent again. Unchecking the box deletes this key. Browser storage can remain until you revisit or clear it. Do Not Track (DNT=1) and Global Privacy Control (GPC=true) disable measurement even if you select the checkbox.
With your consent, the launch page sends this ID to our Cloudflare API to measure visits and includes it with your registration. D1 deduplicates visits daily. Daily hashed visit records are eligible for deletion after 90 days; cleanup runs when the API handles traffic and may occur later. These counts represent browsers that consented on the signup page, not all website requests and not a guaranteed count of individual people. This measurement does not track visits to other pages, and a measurement failure does not prevent registration.
The launch API uses short-lived IP hashes for rate limiting; it does not store raw IP addresses. Measurement is separate from consent to receive launch emails.
Deletion requests
Contact security@aivirusdb.com to request deletion of your registration data or ask about retained consent records and email suppression hashes.
External sources
Threat records link to third-party advisory sites. Their privacy practices apply after you follow those links.