Observatory

Project method and boundary

Privacy

Breach Gazette publishes organization-level official data while excluding victim, contact, credential, and narrative material.

No visitor profiling

There are no accounts, cookies, analytics, remote fonts, query telemetry, or background requests. Filters execute locally against static data.

Minimised records

The public output excludes personal emails, phone numbers, street addresses, identifiers, credentials, complete breach notices, complete decisions, free-text narratives, and CNIL raw row combinations.

Private state

Raw retrievals, caches, comparison state, and complete source snapshots remain in a configured private data root outside the repository and deployed site.