Privacy

Email accounts store an email address and a password hash. Google accounts store the profile fields below and no password. Session tokens are stored as hashes. The browser also receives an httpOnly session cookie.

Ownership tokens are shown once and stored as a hash. Scan evidence keeps a short redacted preview, selected response headers, and a content hash. Cookie values and secret-looking strings are removed before storage.

This build does not send scan evidence to an AI model. Reports written to local disk are not encrypted at rest.

Google sign-in stores the account email, display name, avatar URL, and Google's stable subject identifier. Google access tokens and refresh tokens are not stored. A Google login does not replace ownership verification before a scan.

The contact form stores the name, email address, optional company name, and message you submit. It does not create an account.