Last updated: March 29, 2026
We do not sell your data. We do not send marketing emails unless you opt in.
We use a single session cookie (PHPSESSID) to keep you logged in. It is secure, HTTP-only, and uses SameSite=Lax. We do not use tracking cookies or analytics.
Your data is stored on a secure server with encrypted connections (HTTPS). Scan data is stored in a local database and is not shared with third parties beyond the services listed above.
You can request access to, correction of, or deletion of your data at any time by emailing [email protected]. If you are in the EU, you have additional rights under the GDPR including data portability and the right to lodge a complaint with a supervisory authority.
We retain your account and scan data for as long as your account is active. If you delete your account or request deletion, we will remove your data within 30 days.
For privacy-related questions, contact [email protected].