Privacy

Short version: we don’t collect your files.

Was I hit? checker. Lockfiles are read and parsed in your browser and are never uploaded to Caldrel. To look up issues, your browser sends package names, versions and ecosystems directly to OSV.dev (operated by Google), subject to its own terms and privacy policy.

Accounts and email. We don’t run accounts, and newsletter signups are not open yet, so no email addresses are collected.

Hosting. The site is served by Cloudflare Pages, which may keep standard server logs.

Fonts. We use your device’s built-in system fonts, so no font services such as Google Fonts are contacted when you visit.

Analytics. We don’t currently use analytics or tracking cookies. If we add privacy-friendly analytics, we’ll update this page first.

Questions: [email protected] or @CaldrelHQ.

Last updated 23 October 2026.