Privacy Policy
The short version
We don't sell or share your data with anyone. An account exists so you can log in and, if needed, so we can email you about something that affects your account or your scans. That's it — no marketing email, ever.
What we collect, and why
Creating an account stores your email address and a hashed password — never the password itself. That's used only to authenticate you and, if you ever request a password reset, to send that one email. Your IP address is never stored raw; it's mixed with a secret salt and one-way hashed before being kept, solely to enforce daily scan limits and prevent abuse.
The only email this service sends is a password-reset link, and only when you ask for one. We don't send product updates, newsletters, or any other marketing material — there's no mailing list to opt out of, because one is never built from your address in the first place.
Scans and reports
As covered on the About page, every scan produces a public, permanent report page — that's true whether or not you're logged in, since there's no ownership verification for the URL being scanned. Being logged in only adds a private dashboard listing your own scan history to your own account; it doesn't make any individual report page itself more or less public.
Third parties
No analytics, ad trackers, or third-party scripts run on this site. Nothing about your account or your usage is shared with, or sold to, any other company.