Privacy Policy
External Services
VietShield WAF relies on the following third-party services to provide enhanced security features. All external connections are documented below:
1. VietShield Intelligence Network
- Service: Threat Intelligence Feed
- Why we use it: To synchronize the latest list of known malicious IPs for preemptive blocking.
- Data Sent: Your server's IP address (standard HTTP request) and API authentication headers. No personal user data is sent.
- Terms & Privacy: Privacy Policy
2. Google
- Service: Googlebot IP Ranges
- Why we use it: To fetch the official list of Googlebot IP addresses for whitelisting.
- Data Sent: None (Public JSON feed fetch).
- Terms & Privacy: Google Privacy Policy
3. Cloudflare
- Service: Cloudflare IP Ranges
- Why we use it: To fetch official Cloudflare IP ranges to trust headers from Cloudflare proxy servers.
- Data Sent: None (Public text/JSON feed fetch).
- Terms & Privacy: Cloudflare Privacy Policy
Data Collection
VietShield WAF collects the following data locally on your WordPress installation:
- Traffic Logs: IP addresses, request URLs, user agents, and timestamps for security analysis.
- Block Events: Details of blocked requests including attack type and payload for audit purposes.
- Login Attempts: Failed and successful login attempts for brute force protection.
All data is stored locally in your WordPress database. We do not collect or transmit personal user data to external servers unless you explicitly enable Threat Sharing.
Threat Sharing (Optional)
If you enable Threat Sharing, the following data may be sent to VietShield Intelligence Network:
- IP addresses of blocked attackers
- Attack type classification (SQLi, XSS, RCE, etc.)
- Country code and ASN of attacker (if available)
- Timestamp of the attack
This data helps improve the global threat intelligence feed for all VietShield users. You can disable Threat Sharing at any time in Settings.
Contact
If you have any questions about this Privacy Policy, please contact us at [email protected].