Privacy notice

Last updated: 22 October 2026.

This notice explains what personal data is processed when you use pluginrisk.com, in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Who runs this site

The site is run by PluginRisk, which is responsible for the personal data described here. Contact: info@pluginrisk.com.

What we collect

  • No accounts, no cookies, no advertising. The site sets no cookies and uses no advertising or cross-site tracking tools. The calculator and comparison tools run in your browser; your inputs are not sent to us.
  • Cloudflare Web Analytics. We use Cloudflare's privacy-focused analytics to count page views and measure page speed. A small script from static.cloudflareinsights.com sends page-load timing data and the page address to Cloudflare. According to Cloudflare's documentation, it does not use cookies or other browser storage and does not fingerprint visitors, and Cloudflare discards the IP address at the edge rather than storing it. We see only aggregated statistics.
  • Hosting and security. The site is hosted on Cloudflare. To deliver pages and protect the site from abuse, Cloudflare necessarily processes technical data from each request, such as your IP address, browser user agent, the page requested and the time. We have not enabled request logging of our own.
  • Fonts and images are served from our own domain. We do not use Google Fonts or other external font or image services.
  • Email. If you email us, we receive your email address, your name if you include it, and the content of your message.

Why, and legal basis

  • Hosting and security data: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR / UK GDPR).
  • Aggregated analytics: our legitimate interest in understanding which pages are used and how fast they load, so we can improve the site (Article 6(1)(f)).
  • Emails: our legitimate interest in answering and acting on messages you choose to send, such as corrections (Article 6(1)(f)).

We do not sell personal data or use it for advertising or profiling.

Who receives it

Cloudflare, Inc. acts as our hosting and security provider and processes request data on our behalf. Cloudflare may process data outside the UK and EEA; such transfers rely on the safeguards described in Cloudflare's privacy policy. Our email provider processes messages you send us.

How long we keep it

  • Request data handled by Cloudflare is kept only as long as Cloudflare needs it to deliver and secure the service, under its own retention rules; we do not keep a copy.
  • Emails are kept for as long as needed to deal with your message, and deleted when no longer needed.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to processing, and to data portability where applicable. To use these rights, email info@pluginrisk.com. You can also complain to a data protection authority: in the UK the Information Commissioner's Office, or in the EU the supervisory authority where you live or work.

Changes

If we add a newsletter, other analytics or anything else that processes personal data, we will update this notice first and change the date above.