Privacy
Last updated: April 6, 2026
Overview
SafeVersion (this website and the public API) is a worldwide service. This page describes what we process, where core infrastructure runs, and which third-party providers support the service.
Hosting and infrastructure
The service is hosted on Vercel. Application workloads may run through Vercel infrastructure, including Fluid compute capacity in Frankfurt, San Francisco, and Washington, D.C.. Our primary database is hosted in Frankfurt, Germany. Because Vercel operates a global platform, request handling, caching, logging, and related service operations may be processed in one or more of those regions depending on routing, availability, and failover. Additional details are described in Vercel's privacy policy.
Analytics
We use Vercel Analytics on this website to understand aggregate traffic (for example page views and Web Vitals). Analytics is configured in our Next.js app via @vercel/analytics. See Vercel Analytics and privacy for what Vercel collects and how it is processed.
API and server-side processing
When you call the public API, our servers receive technical data such as your IP address, request headers, timestamps, and the package name (and query parameters) you requested. We use this to operate, rate-limit, and protect the service. We do not sell personal data. Logs may be retained for a limited period for security, abuse prevention, debugging, and reliability.
To produce responses, the service contacts third-party data sources (for example the npm registry, OSV, and sometimes GitHub for release metadata). Those providers process data under their own terms and policies.
Cookies and local storage
The marketing site may use minimal storage for basic functionality (for example theme preference). Vercel Analytics may use cookies or similar technologies as described in Vercel's documentation.
Your rights
Where the GDPR or similar law applies, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority. If you want to exercise a privacy right, use any contact details published on the website or in the repository.
Changes
We may update this page from time to time. The "Last updated" date at the top reflects the latest revision.