Privacy policy

1. Controller

The controller under the General Data Protection Regulation (GDPR) is Nikolas Eller, Aachener Str. 1370, 50859 Cologne, Germany, email: info@n-eller.com. A data protection officer is not required by law and has not been appointed.

2. Overview

This is a static project website. It has no registration, no login, no forms and sets no cookies. Personal data is processed only as far as technically necessary to deliver the site (section 3), when your browser loads current project information from GitHub (section 4), and, only with your consent, for audience measurement (section 5).

3. Hosting and delivery (Cloudflare)

The site is delivered through Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. On every request Cloudflare processes technically necessary connection data: IP address, date and time, requested URL, referrer, browser identifier (user agent) and security attributes of the request.

The purpose is to deliver the site, protect it against attacks (for example DDoS) and analyse errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a fast, secure and stable website. The site cannot be displayed without this data.

Cloudflare acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. Processing in the USA is possible. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so transfers rely on the European Commission's adequacy decision (Art. 45 GDPR), supplemented by standard contractual clauses (Art. 46(2)(c) GDPR). We do not store server logs ourselves. Cloudflare deletes connection data once it is no longer needed for these purposes. Details: cloudflare.com/privacypolicy.

4. Project information from GitHub

If JavaScript is enabled, your browser loads the current star count and the latest release of the project directly from the public API at api.github.com, provided by GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. GitHub receives your IP address, the time, your browser identifier and the origin of the request (https://nuclei-security-center.n-eller.com). GitHub sets no cookies here and no login data is sent.

The main purpose is to show the current release. For security software this matters: visitors should install the latest version with all security fixes, not an outdated one. The version display is a core function of this site. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is accurate, up-to-date information about the project. GitHub processes the data as an independent controller. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Details: GitHub General Privacy Statement.

The result is cached in your browser's sessionStorage for up to one hour (see section 6), so that not every page view queries GitHub again and the version display does not fail on GitHub's rate limit. If you disable JavaScript, no request goes to GitHub and the site still works.

5. Audience measurement (Cloudflare Web Analytics), only with consent

Only if you select “Allow” in the banner does your browser load the Cloudflare Web Analytics script (static.cloudflareinsights.com). It reads technical information from your browser (for example the page visited, referrer, load times and device type) and sends it to Cloudflare. Cloudflare sets no cookies for this, states that it does not build profiles or fingerprint browsers, and gives us only aggregate statistics (page views, referrers, countries, device types). We cannot identify individual visitors.

The purpose is to understand how the project website is used. The legal basis is your consent under § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(a) GDPR. Cloudflare acts as our processor; section 3 applies to the transfer to the USA.

Consent is voluntary. You can withdraw it at any time with effect for the future, through “Privacy settings” in the footer or right here:

Change settings

6. Storage in your browser

This site sets no cookies. It only stores the following entries in your browser, which are never sent to us:

• nsc-site.theme (localStorage): your choice of light or dark theme, only if you use the toggle. Kept until you delete it.
• nsc-site.github (sessionStorage): cache of the project information from section 4. Deleted when you close the tab.
• nsc-site.consent (localStorage): your analytics choice and when you made it, so the banner does not appear on every visit. Kept until you delete it.

These entries are strictly necessary to provide the functions you use (§ 25(2) no. 2 TDDDG). You can delete them at any time in your browser settings.

7. Contact

If you email us, we process your address and the content of your message to handle your request. The legal basis is Art. 6(1)(f) GDPR (our interest in answering enquiries), or Art. 6(1)(b) GDPR for enquiries about a contract. We delete the message once the matter is resolved, unless statutory retention obligations apply.

Issues, discussions and security reports on GitHub are a GitHub service, governed by GitHub's terms and privacy statement. Issues and discussions are public.

8. External links

Links to GitHub and other websites are only loaded when you click them. From then on, the privacy policy of the respective provider applies.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to info@n-eller.com is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement.

You are under no statutory or contractual obligation to provide personal data. There is no automated decision-making, including profiling (Art. 22 GDPR).