Privacy Policy

What happens when you scan a site

You type a website address. Our server fetches that site, runs the checks, and shows you a report. The report exists only in that response and in your browser. When you close the page, it's gone — we keep no copy of the report, the findings, or the address you scanned.

Your IP address

To keep the free service fair (10 scans per hour), we hold your IP address in memory only, just long enough to count requests inside that hour. It is not written to a database, not used for tracking or advertising, and disappears when the counting window passes or the server restarts.

The name on a PoC report

If you generate a Proof of Concept report, you can type your name so it appears on the document. That name — and the report itself — travels inside a tamper-proof signed token carried by your own browser, never in storage on our server. We cannot read, list, or retrieve past reports.

Cookies and tracking

SiteGuard sets no cookies and runs no analytics, advertising, or tracking scripts. There is nothing to consent to because there is nothing collecting.

The sites you scan

Scans are fetched from our server, so a scanned site sees our server's address — not yours. What a scanned site does with its own server logs is up to that site.

Changes and questions

If this policy ever changes, the new version will be posted on this page. Questions or concerns: reach us through the GitHub project.