Privacy Policy
Last updated: 2026-04-11
Information We Collect
DrugHub collects limited data to maintain and improve our endpoint verification infrastructure. The data we collect falls into two categories:
Automatically collected data: When you visit drughubdnm.com, our server infrastructure logs standard HTTP request data including your IP address, browser user-agent string, referring URL, pages viewed, and timestamp of each request. If you access our site through the Tor network, the logged IP address reflects the Tor exit node rather than your actual IP address. We use Cloudflare for content delivery and DDoS protection — Cloudflare's data processing is governed by their own privacy policy.
Voluntarily submitted data: If you contact us through our research inquiry email (research@drughubdnm.com), we retain your email address and message content for the purpose of responding to your inquiry. Phishing URL reports and verification data corrections submitted by the community are stored in our threat intelligence database with the submitter's contact information stripped unless they explicitly request attribution.
How We Use Collected Data
Server log data is used for three purposes: monitoring site availability and performance, detecting and mitigating abuse (automated scraping, denial-of-service attempts), and analysing aggregate traffic patterns to prioritize our verification coverage. We do not use server logs to identify individual users or track browsing behavior across sessions.
Email correspondence data is used solely to respond to the inquiry that generated it. We do not add contact email addresses to mailing lists, share them with third parties, or use them for any purpose beyond the specific conversation initiated by the sender.
Community-submitted threat intelligence (phishing URL reports, fraudulent endpoint documentation) is incorporated into our detection infrastructure to improve phishing identification accuracy. Submitter identity is not associated with the resulting threat intelligence records unless the submitter explicitly requests credit.
Third-Party Services
drughubdnm.com uses the following third-party services that may process user data independently:
- Cloudflare — Content delivery, DDoS protection, and DNS resolution. Cloudflare processes request metadata including IP address and browser fingerprint data. Their privacy policy is available at cloudflare.com/privacypolicy.
- Namecheap — Domain registration. Namecheap does not have access to site traffic data. Their privacy policy is available at namecheap.com/legal/general/privacy-policy.
We do not use third-party analytics services (Google Analytics, Matomo, etc.), advertising networks, or social media tracking pixels. No user behavior data is shared with data brokers or marketing platforms.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding data we hold about you:
- Right of access — You may request a copy of any personal data we hold about you. Given our minimal data collection, this is typically limited to server log entries and email correspondence records.
- Right to deletion — You may request deletion of your personal data from our systems. Server logs are automatically purged after 90 days. Email correspondence can be deleted upon request at any time.
- Right to rectification — You may request correction of inaccurate personal data.
- Right to object — You may object to the processing of your personal data. If you access our site through Tor, your IP address is already anonymized at the network level.
To exercise any of these rights, contact us at privacy@drughubdnm.com. We aim to respond to all data subject requests within 30 days.
Data Security
All data transmitted between your browser and drughubdnm.com is encrypted using TLS 1.3. Server log data and email correspondence are stored on encrypted infrastructure (AES-256 at rest). Access to stored data is restricted to authorized DrugHub members through multi-factor authentication.
We do not store passwords, financial information, or authentication credentials of any kind. Our platform does not require user registration and does not maintain user accounts.
Changes to This Policy
We may update this privacy policy to reflect changes in our data practices or applicable regulations. Material changes will be noted with an updated "Last updated" date at the top of this page. Continued use of drughubdnm.com after a policy update constitutes acceptance of the revised terms.
Privacy-Related Contact
For privacy-related inquiries, data subject requests, or questions about this policy, contact privacy@drughubdnm.com. For general research inquiries unrelated to privacy, use research@drughubdnm.com.