Pruva PRUVA

Privacy Policy

Last updated: February 2026

1. Overview

Pruva is designed with minimal data collection in mind. This policy explains what data we collect, why, and how it is handled.

2. Data We Collect

Data we do not collect

  • We do not require user accounts or registration to browse reproductions
  • We do not use cookies for tracking or advertising
  • We do not collect personal information from visitors
  • We do not sell or share data with third parties

Data we may collect

  • Server logs: Standard HTTP access logs (IP address, user agent, request path, timestamp) retained for operational and security purposes. Logs are automatically rotated and deleted.
  • API keys: If you use the Pruva API with an API key, we store the key hash and associate it with usage metrics for rate limiting.

3. Vulnerability Data

Pruva processes publicly available security advisories from sources such as GitHub Security Advisories (GHSA) and the National Vulnerability Database (NVD). All vulnerability data referenced by the Service is already public.

Reproduction results, scripts, and analyses generated by Pruva are derived from public advisories and are published publicly.

4. Third-Party Services

The Service is hosted on Railway. Their infrastructure may collect standard server metrics. The Service uses Google Fonts for typography. Refer to their respective privacy policies for details.

5. Data Retention

Published reproductions (REPRO IDs) are intended to be permanent, citable records. Server logs are retained for a limited operational period and then deleted.

6. Security

We use industry-standard practices to protect the Service infrastructure, including encrypted connections (TLS), access controls, and regular security updates. However, no system is completely secure, and we make no guarantees regarding the security of data transmitted to or from the Service.

7. Children's Privacy

The Service is not directed at individuals under the age of 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date above.

9. Contact

For questions about this Privacy Policy, open an issue on the Pruva GitHub repository.