Privacy
What is collected, and what is not.
Your stack is the most sensitive thing you could tell a website. A list of the products and versions an organisation runs is a target list.
So it is not stored unless you sign in and save it. Passed on the query string it is used to render the page and then discarded; nothing is written down.
We measure how our site is read with Matomo, which 360REV runs for us on servers in the United States. If you accept our analytics cookie, a random number in that cookie lets us count you once over up to 13 months and see whether you come back. If you decline, or your browser sends Global Privacy Control or Do Not Track, we set no cookie and count your visit only by a code that changes every day and cannot identify you. Matomo keeps your address with its last parts removed, for country statistics, and deletes visit records after 25 months. You can change your choice at any time under "Cookie settings" at the bottom of every page; the cookies are listed on the Cookies page. Our legal basis is your consent (GDPR Art. 6(1)(a)) for the cookie, and our legitimate interest in knowing how many people read us (Art. 6(1)(f)) for counting without it. Your rights are access, erasure, objection, and complaint to your data-protection authority; to use them, write to us through the Contact page.
A page is counted only after your browser has shown it for two seconds: a small script from this site tells this site’s own server, and nothing is sent anywhere else. With JavaScript switched off, a tiny image from this site does the same.
If you ask for this browser not to be counted — add ?rev360=ignore to any address on this site — we set a cookie, rev360_ignore, and its only effect is that your visits are not counted, by us, by Matomo or by 360REV. ?rev360=count switches it back and your visits are counted again.
We do not log the stack parameters against a visitor. The URL you can bookmark contains your stack; our request log does not — and it is stripped out of the URL before any analytics call leaves this server, so the analytics host never sees it either.
Counts of page views also go to 360REV, the platform that sends our newsletters and runs our error reporting. They are sent from this server, aggregated by page, with no address and no visitor identifier — and a request carrying Do Not Track never reaches them. We do not serve their browser tag, because every page here works with JavaScript switched off and we are not going to put a third-party script on the page to count you.
Alerts are the one exception to "nothing is stored". If you turn them on, we store the products you asked to be told about — not their versions, and not your address. What we hold is on the alerts page, and you can switch it off from the same control.