Privacy Policy

Draft template. Have this reviewed and edit the bracketed items before going live. Not legal advice.

What we collect

The website URL you submit, your email address if you provide one, the scan results (findings with masked evidence), a hashed version of your IP address for abuse prevention, and basic payment status from our payment provider (Gumroad or Stripe). Opening a scan page also records the scan id, time, hashed IP, user agent and referrer, skipping obvious bots. Starting checkout records the scan id and time. We never see or store card details. If you pay through Gumroad without leaving an email first, the buyer email from that sale is saved on the scan so we can send the report.

How we use it

To run your scan, email you your report when you gave an address, process payment, prevent abuse, and, only if you ticked the box, send occasional product and security tips. You can unsubscribe at any time.

What we do not do

We do not store your source code, we mask detected secrets, and we do not sell your data.

Processors

Gumroad or Stripe (payments), [email provider] (email), [hosting provider] (hosting).

Your rights & contact

Email [email protected] to access or delete your data.