We collect what we need to run the product. Nothing more. We don't sell anything, ever.
Account data: email, optional display name, billing-related fields (handled by Lemon Squeezy — we don't see card numbers).
Scan data: URLs you submit, the resulting reports, raw HTML (auto-deleted on a schedule per plan; see retention below). For anonymous scans we store a one-way hash of your IP address — no user agent, no browser fingerprint — to enforce the 1-scan lifetime cap.
Usage analytics: Cloudflare Web Analytics — aggregated, cookieless. No tracking pixel on our pages.
No third-party cookies. No GA. No Facebook Pixel. No data brokers. No "session replays."
From /account/export you can export everything we store about you (JSON or CSV). From /account/danger you can delete your account and everything attached to it — usually within minutes.
[email protected] — replies within 5 business days.
Last updated: 2026-05-01.