Privacy

When you scan a website

• We save the report: the domain you entered and what our checks found. All of it is information any browser can already see. Anyone with the report's link can open it, and search engines are asked not to list it. Reports are deleted 90 days after the scan.
• To stop abuse, we count scans per visitor and per domain. We store a one-way hash of your IP address, never the address itself, and delete these counters within a day.
• Cloudflare Turnstile checks that you're human. Cloudflare processes your request to do that, under its own privacy policy.
• Our scanner only reads public pages and DNS records. It doesn't log in, submit forms or look for hidden files.

When you join the list

We store your email, the website you entered (if any) and your role, to tell you when monitoring launches. We don't sell or share it. We keep it until you ask us to remove it.

Where it's stored

The site runs on Vercel. Reports, counters and the list are stored in Supabase (region: Mumbai, India). Vercel keeps short-lived request logs for operating the service.

Your choices

• To have a report or your list entry deleted, or to stop us scanning a domain you own, email mukesh@chillflareinnovations.com.
• We add opted-out domains to a block list, and they can't be scanned again.