What happens to the data in a notification.
Vulnerabilities can be reported anonymously: contact details are optional, and without them you receive a claim code that lets you return to your notification. The reporter's identity is not disclosed without their explicit consent.
Notification data is used exclusively for registering and resolving cases, in line with personal-data-protection legislation. Public case pages carry no authors, actors or other personal data.