Privacy Policy

1. Information collected automatically

Like most websites, the infrastructure used to serve AhmedRabeeah.com may generate technical logs when requests are made. These logs can include information such as IP address, user agent, requested resource, date and time, response status, and security-related request metadata.

This information is generally used for site delivery, troubleshooting, abuse prevention, security operations, and service reliability.

2. Cloudflare infrastructure

The site and Vulnerability Watch use Cloudflare services for DNS, content delivery, security, Worker execution, and related infrastructure functions. As part of operating these services, Cloudflare may process network and request metadata in accordance with its own privacy and service terms.

3. Vulnerability Watch

Vulnerability Watch retrieves public vulnerability intelligence through vuln.ahmedrabeeah.com. The browser requests public JSON from this service. The service is designed to return vulnerability intelligence only and does not require visitors to submit personal information.

Upstream credentials, including the NVD API key, are handled server-side in the Cloudflare Worker environment and are not intentionally exposed to site visitors.

4. Local browser storage

The site may use browser localStorage for non-sensitive preferences such as dark/light mode and the selected visual color palette. These values are stored in your browser and are not intended to identify you.

5. Cookies and analytics

The current site design does not intentionally use advertising cookies or behavioral analytics trackers. If analytics or additional interactive services are added in the future, this policy should be updated to describe them before or when they are deployed.

6. Google Fonts

The site currently loads web fonts from Google Fonts. When these resources are requested, Google may receive standard network information associated with the request, such as your IP address and browser information, subject to Google's own privacy practices.

7. External links

The site may link to external services such as LinkedIn, Credly, NIST NVD, CISA, FIRST, or other third-party websites. Once you leave AhmedRabeeah.com, the privacy practices of the destination service apply.

8. Email and direct contact

If you contact me at [email protected], the information you include in your message may be retained as necessary to read, respond to, document, or follow up on the communication.

Please do not send passwords, private keys, authentication tokens, or other sensitive credentials by email.

9. Data sharing

Personal information is not intentionally sold or rented. Information may be processed by infrastructure or service providers as necessary to operate, secure, and deliver the site. Information may also be disclosed when required by applicable law or to address abuse, fraud, or security concerns.

10. Data retention

Retention depends on the type of information involved. Browser preferences remain on your device until you clear them. Infrastructure logs may be retained according to the configuration and retention practices of the relevant hosting or security provider. Direct communications may be retained for as long as reasonably necessary for their purpose.

11. Security

Reasonable technical controls are used to reduce unnecessary exposure, including HTTPS, HSTS, Content Security Policy, DNSSEC, security headers, restricted browser connections, and server-side secret handling. No website or network service can guarantee absolute security.

Additional information about the site's security design is available on the Security Architecture & Trust page.

12. Changes to this policy

This policy may be updated as the site changes, especially if analytics, forms, additional third-party services, or new data-processing features are introduced. The effective date at the top of this page should be updated whenever material changes are made.