Legal

Privacy Policy

Effective: July 7, 2026 App: PatchPulse Publisher: DGZ Games

                PatchPulse is built to work anonymously by default. We do not require an account to start tracking advisories, and we keep the data we hold about you to the minimum needed to run your watchlist and deliver alerts. Read on for a full account of how data flows in and around the Application.
            

✦ At a Glance

Anonymous by default

PatchPulse signs you in with an anonymous Firebase identity. No name, email, or phone number is required to build a watchlist or receive alerts.

Watchlist data — stored to power your alerts

The vendors/products you track, mute rules, and (for Pro users) tickets, notes, owners, and due dates are stored in our database so we can match new advisories against your list.

Push notification token

A Firebase Cloud Messaging token is used to deliver advisory alerts to your device. It is not used for advertising.

Advisory content — sourced from public feeds

CVE, CISA KEV, EPSS, and vendor advisory data displayed in the app comes from public government and vendor sources, not from you.

1 Who We Are

DGZ Games ("we," "us," "our") is the developer and publisher of PatchPulse. We can be reached at support@dgzgames.com.

2 Information We Collect

To provide watchlist and alerting functionality, PatchPulse collects and stores:

Anonymous account identifier — a Firebase-generated device identity used to associate your watchlist with your installation. No name or email is attached unless you choose to link an email for cross-device sync.
Watchlist selections — the vendors and products you choose to track.
Mute rules — advisories or products you have chosen to silence.
Pro tracking data — for Pro subscribers, optional ticket references, notes, assigned owner, and due dates you attach to a tracked advisory.
Push notification token — issued by Firebase Cloud Messaging to deliver alerts to your device.
Email address — only if you voluntarily link an email address to your anonymous account for cross-device access.

                We do not collect your precise location, contacts, photos, or browsing history, and PatchPulse contains no advertising SDK.
            

3 Advisory Data Sources

PatchPulse aggregates publicly available vulnerability and advisory information to match against your watchlist, including:

The National Vulnerability Database (NVD)
CISA's Known Exploited Vulnerabilities (KEV) catalog
EPSS (Exploit Prediction Scoring System) data
Public vendor security advisory pages and RSS feeds

This is public data about software vulnerabilities — it is not information about you, and retrieving it does not involve sending any of your personal data to these sources.

4 How Your Data Is Stored

PatchPulse uses Google Firebase as its backend infrastructure:

Firebase Authentication — manages your anonymous identity and, if you opt in, a linked email address.
Cloud Firestore — stores your watchlist, mute rules, and Pro tracking data (tickets, notes, owner, due dates).
Firebase Cloud Messaging — delivers push notifications to your device.
Firebase Remote Config — controls app behavior and feature flags; contains no personal data.
Cloud Storage — hosts the static vendor/product catalog used to populate the watchlist picker; contains no personal data.

Data is processed and stored on Google Cloud infrastructure in accordance with Google's security practices. See Google's Privacy Policy at https://policies.google.com/privacy.

5 Free and Pro Tiers

PatchPulse offers a free tier (up to 10 tracked products, basic mute) and an optional Pro upgrade (unlimited watchlist, ticket tracking, notes, owner, due date, custom mute rules). If you purchase Pro, the transaction is processed by Google Play Billing; DGZ Games does not directly receive or store your payment card details.

6 Permissions We Request

INTERNET

Required to sync your watchlist, retrieve advisory data, and receive push notifications.

POST_NOTIFICATIONS

Allows PatchPulse to display push alerts when a new advisory, CVE, or CISA KEV entry matches your watchlist.

7 Data Retention

Your watchlist, mute rules, and Pro tracking data are retained for as long as your account exists. If you uninstall the Application without linking an email address, your anonymous account and associated data may become permanently inaccessible. You may request deletion of your account and associated data at any time by contacting us.

8 Children's Privacy

PatchPulse is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal data, please contact us and we will take steps to delete it.

9 Security

We rely on Firebase's built-in authentication and access-control mechanisms to protect your watchlist data. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

10 Your Rights

You may access, export, or delete your watchlist and tracking data, or delete your account entirely, by:

Using the in-app account deletion option (where available)
Contacting us at the email below to request deletion or export

If you purchased Pro, questions about billing data can also be directed to Google Play at myaccount.google.com.

11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Application, legal requirements, or our practices. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically.

Material changes that involve new data collection or sharing practices will be communicated through an in-app notice prior to taking effect.

12 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or PatchPulse's data practices, please contact us:

DGZ Games
Email: support@dgzgames.com

We aim to respond to all privacy inquiries within 7 business days.