ML CVEs
Home Almanac Topics
☰
CVE Filter Tools Glossary Resources Editors
Offensive Sec network
Adversarial ML AI Attacks AI Sec JailbreakDB Jailbreaks FYI

Privacy Policy

Last updated: 2026-05-10

This privacy policy describes how ML CVEs (https://mlcves.com) collects, uses, and protects information about visitors and subscribers. Operated as part of the AI Sec Network. For questions, contact [email protected].

Information we collect

Automatically collected (analytics)

We use privacy-respecting analytics (Plausible) which does not set cookies and does not track individuals across sites. We collect aggregate traffic data: pages viewed, referrer source, browser type, country (not city), and screen size. We do not collect or store IP addresses.

Voluntarily provided (newsletter)

If you subscribe to our newsletter, we collect: email address, the cluster preferences you selected, the source page you signed up from, and the timestamp. This data is stored in our database (Cloudflare D1) and synchronized to our email provider (MailerLite) for delivery.

Voluntarily provided (newsletter via direct embed)

Some sites in our network may embed newsletter signup forms directly. These submit to the same backend as the central subscribe page and are subject to the same data handling.

Cookies

We do not use tracking cookies. We may set a small functional cookie if you opt to dismiss a newsletter banner — this expires after 30 days and contains no identifying information.

How we use information

We do not sell, share, or rent your personal data to third parties for marketing purposes. We do not use your data to train AI models. We do not run behavioral advertising.

Service providers

We use the following processors to deliver this site and our newsletter:

Third-Party Services

Email Newsletter

We use MailerLite to send newsletters and email updates. If you subscribe, your email address and any information you provide will be processed by MailerLite in accordance with their Privacy Policy. You may unsubscribe at any time via the link in any email.

Comments

Comment functionality is powered by Giscus, which uses GitHub Discussions. If you leave a comment, your GitHub account data will be processed by Giscus and GitHub. See the Giscus Privacy Policy and GitHub Privacy Statement for details.

GDPR

If you are located in the European Union, you have rights under GDPR including the right to access, correct, or delete your personal data. To exercise these rights or for privacy inquiries, contact us via the information on our About page.

Your rights

Depending on your jurisdiction, you may have the right to: access the data we hold about you, correct it, delete it, restrict its processing, port it to another service, or object to its processing.

To exercise any of these rights, email [email protected]. We respond within 30 days of a verifiable request.

EU/UK GDPR specifics

For visitors in the EU/EEA and UK: we process your email address on the basis of your consent (newsletter subscription) and our legitimate interest (responding to direct correspondence). You may withdraw consent at any time by unsubscribing or contacting us.

You also have the right to lodge a complaint with your supervisory authority. The list is maintained at edpb.europa.eu.

California CCPA / CPRA specifics

For California residents: we do not sell or share personal information as defined under the CCPA. You have the right to know, delete, correct, and opt-out of any sale (which we do not conduct). Contact [email protected] to exercise these rights.

Children

This site is not directed at children under 13 (under 16 in some jurisdictions). We do not knowingly collect data from minors. If you believe we have, contact us and we will delete it.

Data retention

Newsletter subscriber data is retained for as long as you remain subscribed plus 30 days after unsubscribe (for unsubscribe verification and abuse prevention). Aggregate analytics data is retained for 24 months. Inquiry correspondence is retained for 12 months.

Security

We use HTTPS for all traffic, encrypted storage for subscriber data, and access controls limiting which network operators can read data. We have procedures for breach detection and, if a breach occurs that affects you, will notify you per applicable law (within 72 hours for jurisdictions requiring it).

Changes

We may update this policy. Material changes will be flagged at the top of this page for at least 30 days, and we'll notify newsletter subscribers via the next dispatch.

Contact

Email: [email protected]
Operator: AI Sec Network

This policy is provided as-is for informational purposes and does not constitute legal advice. If you require legal advice, consult counsel.