CompatLab privacy & data

The ingress uses your network address to limit abuse.

For successful package-version lookups, we retain the public package name, exact version, UTC day and whether current, earlier or no eligible evidence was available.

The ingress uses your network address to limit abuse.

Admission stores a keyed identifier that rotates daily, groups IPv6 addresses by /64, and is removed after seven days.

Service logs are retained for 14 days; operator and security audit events for 180 days.

Encrypted database backups are retained for seven days.

Collection is best effort, capped at 1,000 package/version/availability rows per day, and expires after 30 UTC days.

The control service may send fixed operational error names to an operator-configured Sentry endpoint.

For an incorrect report or public content removal request, open a repository issue with the report URL and reason.