1. Zero-PII Architecture & Strictly Necessary Session Cookie
Rate My Vuln (CVizSS™) is designed to be anonymous by default. We do not collect or store names, email addresses, account credentials, or IP addresses in our evaluation database. A single strictly necessary HTTP session cookie (cvizss_session_id) and local theme preference (cvizss_theme) are used solely to maintain your 10-duel run state (exempt from tracking consent banners under ePrivacy Directive Art. 5(3) / GDPR).
2. Irrevocable License & Assignment of Evaluation Telemetry
By participating in vulnerability duels, submitting Stage 1 (blind mechanics) or Stage 2 (disclosed context) votes, or flagging score incoherences, you grant the operators of CVizSS™ and their successors, assigns, or acquirers a perpetual, irrevocable, worldwide, royalty-free, sublicensable, and transferable right and license to use, reproduce, modify, aggregate, publish, commercialize, and train statistical or machine learning models on the resulting pairwise preference telemetry and derivative datasets, waiving any moral rights to the fullest extent permitted by applicable law.
3. No Confidential or Non-Public Zero-Day Information
You agree not to submit any confidential, proprietary, embargoed vulnerability details, or personal data when using this service or flagging scoring incoherences. All vulnerabilities displayed are sourced from public security advisories and historical archives.
4. Research Disclaimer & Upstream Trademark Attribution
CVizSS™ Threat Signatures, LLM-upgraded CVSS v3.1 vectors, and empirical Bradley-Terry / Elo ratings are provided “AS IS” without warranty of any kind for security research and calibration purposes only, and do not constitute formal remediation or compliance advice. CVSS® is a registered trademark of FIRST.org, Inc. This project is an independent research initiative and is not affiliated with or endorsed by FIRST.org, MITRE, CISA, or NIST.
5. Contact, Dataset Licensing & Inquiries
For research collaboration, dataset licensing, or general inquiries regarding ratemyvuln.com and the CVizSS™ standard, contact admin@ratemyvuln.com.