Privacy and data handling
Updated November 6, 2026
Merchant URL research
The submitted URL is sent to our server. It retrieves public pages from the target website; that website sees a request from the scanner infrastructure. The merchant scanner parses these pages and applies deterministic rules on our server. Merchant URLs and page text are not sent to Gemini or a search provider by this scanner. The current handler processes inputs in memory and does not write user submissions or reports to an application database. The homepage’s recorded public example is deliberately published; user scans are not automatically published. The report is returned to your browser. Avoid URLs containing account tokens or personal information.
Message and image analysis
The current handler processes message text and supported images in memory, with no Blob upload or submission-content logging. If Google Gemini is configured, the content is sent to Google for analysis under the applicable API service terms. Otherwise, text may be checked with local rules; image analysis is unavailable. Automated responses are not human-reviewed. Remove names, account numbers and other sensitive details before submitting.
Retention and infrastructure
Our application does not intentionally retain new scan inputs after request processing. Hosting infrastructure can process network details, IP addresses, error and access logs under its own retention settings. Google’s handling of model requests depends on the applicable service configuration and terms. This page does not promise zero retention by external providers. Changes in this version do not automatically delete material submitted to previous versions.
Contact and correction requests
When a contact form is available, its contents and your reply email are sent through Web3Forms to the operator’s configured mailbox. Those messages are retained for handling the request. No attachments are requested. Do not submit sensitive documents or payment information.
Other external services
The site uses Vercel hosting and Google Fonts. The analytics component has been removed from this version. Opening source links sends a request to the linked website. A short-lived, process-local salted hash derived from the request IP is used for scan rate limits; raw IP addresses are not stored in that application rate-limit map. External providers apply their own terms: Vercel, Google Gemini API, Web3Forms.
Questions or requests
Use the contact page to ask about access, deletion, historical submissions, or service configuration. Availability and applicable rights depend on your circumstances; the operator must assess the request. Use the contact form for service and privacy questions.