Privacy policy
What data we collect
When you run a free scan, we store the URL you submit and a hashed version of your IP address, together with the score and findings we produce for that URL. When you join the waitlist, we store your email address, the site URL you submit, and the same hashed IP. In both cases we never store your raw IP address — it is immediately reduced to a short keyed hash we use only to detect abuse. We do not access, store, or scan the source code of the site you submit; we only render what is publicly reachable at that URL, the same way any visitor's browser would.
Why we collect it
The scan URL and its result are stored so the result page is reachable and shareable by link, and so an identical URL scanned again within 30 days returns the cached result instead of rendering it a second time. The hashed IP address is used only to rate-limit scans and waitlist sign-ups against abuse. A waitlist email is used for one thing: to notify you at launch. We do not use any of this data for advertising, and we do not sell or share it with third parties for their own purposes.
Who processes it for us
We rely on a small number of infrastructure providers to run this service:
- Supabase, hosted in the EU, stores scan records and waitlist entries.
- Fly.io runs the scanner that renders the submitted URL, on a worker in the EU (Frankfurt).
- Vercel hosts and serves this website, and provides cookieless, aggregate, non-identifying visit analytics.
Each of these providers processes data only to the extent needed to deliver their service to us and is bound to use it for no other purpose.
How long we keep it and how to delete it
Scan records are kept for up to 30 days as a cache, then become eligible for deletion. Waitlist entries are kept until launch notifications have been sent, or until you ask us to delete your data, whichever comes first. To request deletion or ask what data we hold about you, contact us using the details below. We will act on the request within a reasonable time.
Your rights
Depending on where you live, you may have the right to access, correct, or delete the data we hold about you, or to object to its processing. To exercise any of these rights, contact us using the details below.
Who is responsible
The party responsible for data processing on this site (the "controller") is Jan Zellerhoff, reachable at ahoi@sent.com. The full postal address is listed in the imprint.