Privacy

What a scan records

When you submit a domain, the service stores the domain, optional DKIM selector, scan time and public findings so it can show a report and reuse recent results. Report links use unpredictable identifiers and are excluded from search indexing, but anyone with a link can view that report.

Rate limiting and technical logs

Your network address is transformed with a server-held key for hourly rate limiting. The rate-limit entry expires after an hour. Scans do not require an account or an email address. Operational error logs are used to maintain the service; unnecessary visitor information is not logged by the application.

Connections to other services

A scan sends the requested domain to DNS resolvers and registration services, and contacts the public website. Those services can observe these requests from the scanner. Do not submit confidential internal names or secrets.

Advertising and consent

This platform is free and advertising-supported. Third-party advertising defaults off and requires permission. Direct sponsorships use local assets. Global Privacy Control and Do Not Track override advertising permission. We do not pass diagnostic inputs or report identifiers to advertisers. See privacy preferences to allow, reject or change your choice. The host-only HttpOnly choice cookie expires after 180 days; it contains no personal identifier. Necessary features work without consent.

Optional usage analytics

Optional usage analytics is disabled. No analytics events are sent.

Stored reports

Report retention is controlled by the site operator. This version provides an operator maintenance command for removing older reports; it does not automatically delete reports on a schedule.

Optional accounts

Accounts store a normalized email address, an Argon2id password hash, verification state, hashed session identifiers and expiring one-use security tokens. Account throttles use keyed identities that expire after 15 minutes. Sessions use an essential HttpOnly, SameSite cookie and expire after inactivity or their absolute deadline. No real email provider is configured: local development mail is held temporarily in memory.

Export and deletion

Account settings provide password-confirmed export and permanent deletion. Deletion removes private reports, saved domains, sessions and authentication links, but preserves anonymous public diagnostic reports independently of account membership. Private reports are never available through public report links. Backup expiry, operator contact details and any legally required retention must be reviewed before public account launch.