Privacy

PatchTonight has no accounts, sets no cookies and doesn't sell or share data.

Last updated 10 Oct 2026

Visiting the site

The site is hosted on Cloudflare. Like any web host, Cloudflare processes your IP address and browser details to deliver pages and block attacks, under the Cloudflare privacy policy.

We count visits with Cloudflare Web Analytics. It doesn't use cookies or fingerprinting, and only shows us totals such as page views, countries, referring sites and device types. It can't identify you.

Push alerts

If you turn on alerts, your browser gives us two things, and we store only these:

We don't get your name, email address or phone number. To stop alerts, use "Turn off alerts" at the bottom of any page or block notifications for patchtonight.com in your browser. Push addresses that stop working are deleted automatically.

Downloads and RSS

IOC files and the RSS feed are plain files. Downloading them doesn't require or record anything beyond the hosting logs described above.

Changes

If we add advertising in the future, this page will be updated first to explain what it changes and how to opt out.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.