Privacy

This page is written from the code, not from a template. It describes what the site actually does.

Reading pages

• Pages are static files. There are no accounts outside the Monitor, no cookies for tracking, and no advertising scripts.
• A small counter records that a page was viewed and whether the same browser has visited before, using a value stored in your own browser. No IP address, user agent or identifier is stored on the server. The counter is not sent at all if your browser sends Do Not Track or Global Privacy Control. You can clear it by clearing site data.
• Calculators run entirely in your browser. The "where did my money go" page fetches a public exchange-rate table from Frankfurter (frankfurter.dev); that request carries no data about you. The whale-report page reads a file you drop onto it and sends nothing anywhere.
• Your theme choice is stored in your browser only.

Forms

• Arrival reports store platform, payout method, days to arrive and the week. Dropdown reports store country, platform, the methods you saw and the minimum if you typed one. Both also record the time received, and both are kept for 90 days, then deleted. No name, handle, email or IP address is stored with them.
• Corrections store the page, the link you give and the text you type (up to 200 characters per field), plus the time received, for 90 days. A "remove my quote" request stores only the page and the thread link, no free text, and is kept until the paraphrase has been removed.
• Subscribe stores your email address as "pending" until you click a confirmation link (double opt-in). Unconfirmed addresses are deleted after 30 days; confirmed ones are kept until you unsubscribe. Every email carries a one-click unsubscribe, which deletes the address outright. Emails are sent through Resend (resend.com), which sees the address and the message in order to deliver it; no tracking pixels or click tracking are used.
• Abuse limits use a keyed one-way hash of your connection address that changes daily, is kept for at most an hour, and is never stored with a report.

The Monitor (the paid feature)

The Monitor is the only part of this site with an account, and the only part that stores anything about you on a server. Everything below is deleted the moment you press "Delete my account" on the dashboard; that one request removes every row listed here and cancels the Stripe subscription.

• Your account is created the first time you actually use a sign-in link, not when you ask for one: asking leaves only the 15-minute link row, which holds the address and is then gone. Once created, it stores your email address, the date it was created, your subscription status, your Stripe customer and subscription ids, the renewal date, and the date you ticked the box at checkout. It is kept until you delete the account. A one-way hash of your email address is stored alongside it so a sign-in can find the account without a second copy of the address.
• Signing in stores a single-use link token for 15 minutes, and then a random session token for 30 days, in a cookie that is HttpOnly and Secure. Neither is derived from your email address. Signing out deletes the session immediately.
• Your aliases — the names you type in — are stored until you remove them or delete the account. They are used for your own scans only, are never shared with another account, never published, and never linked to a legal name. There is no legal-name field anywhere.
• Scan results store, per alias per week: the number of queries run, the total number of results, the domains that appeared with their first-seen dates, and the result addresses and titles as text. Each weekly row is deleted automatically 180 days after it is written. A short list of domains already seen for each alias is kept, so a new domain can be recognised, until the alias goes.
• Result addresses are stored as text and are never visited. Nothing in this service opens, fetches, screenshots, proxies or embeds a result; the dashboard shows those addresses as plain text with a copy button and never as links, and no thumbnail or snippet is stored or rendered.
• Report card stores the addresses you paste in, the date you added them, and for each check the time and whether the address was still in the search index. Kept until you remove the item or delete the account. Checking asks the search index a question about the address; it never fetches it and never contacts anyone.
• Billing is handled by Stripe. Card details never reach this site; we store only the Stripe customer and subscription ids and the status Stripe sends us. Stripe processes your payment data under its own privacy policy.
• Email is used for the sign-in link, the weekly summary and billing messages only. The weekly summary carries counts and domains, never a result address, and carries a one-click unsubscribe. Messages are sent through Resend (resend.com), which processes the address and the text to deliver them; no tracking pixels or click tracking are used. If sending is not configured, no message goes out and the server keeps a note for 7 days that one was due, carrying the kind and the subject line but never the address or the text.
• Queries go to a third-party search API. It sees the search terms, which contain the aliases you typed; it does not see your email address or your account.

Hosting

Static pages and the form endpoint are served by Cloudflare, which processes connection data under its own privacy policy. We do not enable or read hosting logs.

Your rights

To have something removed, use the corrections form. Because reports carry nothing identifying, we cannot look up "your" reports; deletion is by retention period. If you have a Monitor account, the "Delete my account" button on your dashboard deletes everything listed above in one request, and you can read the same data back on that page at any time.