Privacy Policy

This describes exactly what this application does today, drafted directly from its source code — not a generic template. It is a real draft, not yet reviewed by a lawyer; the operator (name, jurisdiction, and contact details marked below) should complete and have it reviewed before relying on it commercially.

What we collect when you run a scan

• The URL you submit — used to run the inspection you requested. It is sent to our server, used to crawl and load pages from that URL, and is not shared with any third party.
• Your IP address — used transiently to enforce free-tier rate limits (a fixed number of scans per day). This is held in server memory only, is never written to a database, and is cleared whenever the underlying serverless function restarts.
• A random session cookie (inspector_account) — an anonymous, randomly generated identifier with no name, email, or other personal information attached, used to track any free/paid credit balance associated with your browser. It contains no personal data by itself.

What we do not currently do

• We do not require an account, email address, or password to use the free tier.
• We do not sell, rent, or share your data with third parties.
• We do not currently store scan reports after they are returned to your browser — each report exists only in your browser tab.
• Screenshots captured during a scan are written to temporary server storage and are discarded automatically; they are not currently served back to you or retained.

Scan target sites

When you submit a URL, our server acts as an automated visitor to that site: it fetches pages, loads them in a real browser, and may click links or buttons in a read-only way (never filling in or submitting forms). Only submit a URL you are authorised to have inspected.

Payments

If you purchase credits, payment is processed by our payment provider (Razorpay). We do not receive or store your card details — they are handled directly by the payment provider under its own security and privacy practices.

Cookies

The only cookie this application sets is the anonymous session cookie described above. We do not use third-party advertising or analytics cookies.

Data retention

Rate-limit counters, credit balances, and payment-order records held in server memory are cleared whenever the underlying server process restarts — there is currently no long-term database. This will change if/when a persistent account system is introduced, at which point this policy will be updated accordingly.

Contact

[Operator legal name, jurisdiction, and contact email to be added here.]