Privacy policy

We collect as little as possible. We don't use advertising trackers and we don't sell data.

Websites you check

The website addresses that are checked, and their results, are public: every checked site gets its own result page and may appear in our "Recently checked" list. We do not record who checked which site.

Links you paste

If you enter a full link (not just a website address), we check that exact link against blacklists to answer your request, and then forget it: the link is not saved in our database or logs, and the page that shows it is never published or indexed by search engines. To check it, the link is sent to Google (Safe Browsing / Web Risk), without any information about you. Only the website part of the link (for example docs.google.com → google.com) gets a public result page, as described above.

IP addresses

To prevent abuse we count requests per visitor (rate limits). For this we store a one-way, salted hash of your IP address — never the address itself. Rate-limit counters are deleted after about two hours.

Reports and owner requests

If you send a report, we store its type, your description, the optional evidence link, and a hashed IP address. Approved reports are shown publicly without your name. If you send an owner request, we also store the name and email address you give us, only to handle your request. Owner requests are never published.

Bot protection

Forms may be protected by Cloudflare Turnstile, which processes technical data about your browser to tell humans from bots.

Checking a website

When a site is checked, our server visits it with a clearly identified bot and queries public sources (domain registries, certificate logs, blacklists, Google Safe Browsing, the abuse.ch URLhaus database). Only the address of the site being checked is sent to these services. The collected evidence and the site's public text are sent to an AI provider to help write the assessment. No information about you is sent.

Cookies

We don't use tracking cookies. Your light/dark mode choice is saved in your browser's local storage. Administrators get a login cookie.

Your rights

You can ask us to delete a report or owner request you sent. Use the owner form on the relevant result page, or contact the site operator.