A minimal-data approach for an early defensive service.
What we store
For up to 48 hours, the MVP stores a report identifier, submitted and normalised URL, domain, scan time, rule findings, risk score and limited safe metadata. It does not store credentials, cookies, tokens, uploaded files, browser data or full page content.
Service analytics
We may count page views, scan success or failure and plan-interest events. We do not use invasive fingerprinting or place submitted URLs into public analytics. The local MVP does not send analytics to a third party.
Your choices
Do not submit URLs containing personal information or secret query parameters. Reports are accessible to anyone who has their hard-to-guess share link until expiry.