Last updated September 22, 2026
To run a scan, we make a standard HTTPS request to the homepage of the URL you provide, inspect its SSL certificate, look up its public domain registration record, and check for the presence of a contact form. This is the same kind of request any visitor's browser makes — we don't submit forms, log in, or access anything not publicly reachable.
We use a small number of infrastructure providers to run the service: Convex (database and backend hosting), Stripe (payment processing), and Resend (sending alert emails). Each processes only what's needed to perform its function and is bound by its own security and privacy commitments. We do not sell your data to advertisers or data brokers.
Free-scan results are kept to show you your result and improve the service. Paid monitoring data is kept for as long as your subscription is active, plus a short period after cancellation in case you resubscribe. You can request deletion of your data at any time using the contact address in your confirmation email.
You can cancel a paid subscription any time from the billing portal linked in your emails, which also stops future monitoring and alert emails for that site. You can ask us to delete your account data by contacting us directly.
Questions about this policy can be sent to the support address in your confirmation email.