SafeShieldX

Privacy Policy

Last updated: October 2026

1. What we collect

  • Scans: URLs you submit, plus the resulting verdict, score and timestamp. Stored to provide scan history and shareable reports.
  • Accounts: email address and password (stored as a salted hash — we never see your plaintext password), plan status, API keys (hashes only; the raw key is shown to you once at creation), and watchlist domains.
  • Contact messages: name, email and message content from the contact form.
  • Billing: processed by Paddle. We receive subscription status and plan details; we do not store your card numbers.
  • Technical logs: basic server logs (IP address, user agent, timestamps) for security and abuse prevention.

2. What we do with it

We use your data to operate the Service: run scans, enforce daily limits, manage accounts and subscriptions, show scan history, and prevent abuse. We do not sell your personal data or scan history to third parties, and we do not use it for advertising.

3. Third-party services

  • Paddle — payment processing and subscription management (see Paddle's privacy policy).
  • Public data sources — DNS, WHOIS/RDAP and threat feeds (e.g. OpenPhish) queried during scans. Submitted URLs are necessarily sent to these lookup services as part of scanning.
  • CDN libraries — third-party scripts (Paddle.js, jsQR) loaded from public CDNs may receive standard browser request data.

4. Data retention

Scan records are retained while your account is active (or for anonymous scans, for a limited operational period). You may request deletion of your account and associated data at any time via the contact form.

5. Security

Passwords are hashed, API keys are stored as hashes, and traffic is served over HTTPS. No system is perfectly secure; in the event of a breach affecting your data we will notify you as required by law.

6. Your rights

Depending on your jurisdiction you may have rights to access, correct, export or delete your personal data. Contact us and we will respond within a reasonable timeframe.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect their data.

8. Changes

We may update this policy; material changes will be noted here with a new "last updated" date.

9. Contact

Privacy questions or data requests: use the contact form.