Privacy
How changeintel.xyz handles data. Effective 28 September 2026.
The short version
- There are no accounts on changeintel.xyz and no way to create one.
- There is no analytics, advertising, tracking pixel, social widget, or third-party script or font. Pages load only this site's own stylesheet and script.
- The choices you save (your view, the products you run, items you mark, the "new since your last visit" marker, and the theme) stay in your browser. The server reads them to build the page you asked for and does not save them.
- The web server and our network provider see technical request data such as your IP address. It is used only to run and protect the site and is deleted after 14 days.
- We do not sell or share personal data.
Who runs this site
ChangeIntel is built by Evotec. The controller for the public site at changeintel.xyz is:
Evotec Services sp. z o.o.
Drozdow 6, 43-190 Mikolow, Poland
NIP PL 6351859811 · REGON 52059449700000
[email protected]
This policy covers changeintel.xyz only. When an organization installs ChangeIntel on its own server, that organization runs it and is responsible for the data it processes, including sign-in, team notes, and any Microsoft 365 tenant data it connects. Evotec receives no data from those installations.
Server logs
Requests reach the site through Cloudflare, which provides the network, TLS, and protection against attacks, and then our web server, hosted by OVHcloud.
For each request, the web server's access log records the IP address it received the request from, the time, the method and page path, the response status and size, and your browser's user-agent string. It does not record anything after "?" in the address, so search words and filters are not logged, and it does not record the page you came from. An error log records technical faults, which can include the IP address. Both logs are rotated daily and deleted after 14 days.
Because traffic arrives through Cloudflare, the address in our logs can be a Cloudflare address rather than yours. Cloudflare processes your IP address and request data to deliver and protect the site.
The ChangeIntel application itself does not record IP addresses, user agents, or the pages you visit. Its own logs cover background work, such as a source that could not be read, and application errors.
What stays in your browser
These cookies and stored values are first-party, and the cookies are HttpOnly, so page scripts cannot read them. None is used for tracking, analytics, or advertising. Apart from the security cookie, each is set only when you use the feature it supports.
| Name | Purpose | Contents | Lifetime |
|---|---|---|---|
| .AspNetCore.Antiforgery.* | Protects the site's forms against cross-site request forgery. Strictly necessary; set when a page with a form loads. | A random, encrypted token | Until you close the browser |
| ChangeIntel.View | Remembers "My view" | The products, versions, and categories you chose | 1 year |
| ChangeIntel.Stack | Remembers "What I run" | Product names and versions you entered | 1 year |
| ChangeIntel.Marks | Remembers items you marked done or not relevant | Item identifiers, such as a KB or CVE, and the day you marked them | 1 year |
| ChangeIntel.Watch | Remembers what you watch on My radar | Item identifiers, such as a KB, CVE, or product, and the day you started watching | 1 year |
| ChangeIntel.Visit | Shows what is new since your last visit, after you turn it on | Two timestamps | 180 days, renewed on each visit |
| ChangeIntel.Welcome | Hides the "Make this about what you run" card after you choose "Not now" | The value 1 | 1 year |
| changeintel-theme | Remembers the colour theme you picked (local storage) | The theme's name, such as "dim" | Until you clear site data |
| changeintel-accent | Remembers the accent colour you picked (local storage) | The colour's name, such as "teal" | Until you clear site data |
| changeintel-mark-scroll | Returns you to the same place after you mark an item (session storage) | The page address and scroll position | Removed on the next page load |
Your browser sends these cookies with each request, so the server can build the page you asked for. The server does not save them. You can delete them at any time in your browser settings; the site still works and shows the default view. Please enter only product versions in "What I run", not personal information.
A settings file you download, and a settings or shared-view link, hold your settings themselves; the server keeps no copy. A link carries them after "?" in its address.
Cloudflare can set its own strictly necessary security cookie, such as __cf_bm, when it checks for automated traffic.
How the content is collected
The server reads public sources on a schedule, not when you visit: Microsoft, CISA, FIRST, and the community blogs listed on the Sources page. These requests carry no information about visitors. The collected titles, links, and dates are kept in the site's own database, which contains no visitor data. Items link to their original pages; when you follow a link, that site's privacy policy applies.
Providers and transfers
- OVHcloud hosts the server in the European Union: the server logs and the public-content database.
- Cloudflare provides the network and protection in front of the site and processes the IP address and request data of every request. Cloudflare operates worldwide and is based in the United States; transfers are covered by its data processing addendum, which includes the EU Standard Contractual Clauses.
- Backups are encrypted and contain the public-content database and server configuration, not visitor data.
Legal basis
- Server and network logs: our legitimate interest in running the site reliably and protecting it and its visitors from abuse (Article 6(1)(f) GDPR).
- Security cookie: strictly necessary to protect the site's forms, so no consent is needed to store it.
- Preference cookies and browser storage: stored only when you ask for the feature, because they are needed to provide it. You control them and can delete them at any time.
Your rights
Under the GDPR you can ask to access, correct, delete, or restrict the processing of your personal data, object to processing based on legitimate interests, and receive your data where portability applies. Write to [email protected]. We keep no account or profile for you, and your preferences are in your own browser, where you can see and delete them. To find server log entries, we need details such as your IP address and the time of your visit, and only within the 14 days the logs are kept.
You can also complain to a data protection authority, in particular where you live or work. In Poland this is the President of the Personal Data Protection Office (UODO).
Children and changes
ChangeIntel is a professional tool for IT administrators and is not directed at children. If this policy changes, the new version is published on this page with a new effective date.