Privacy Policy

DRAFT, last updated October 2026. Pending owner review.

What we collect

• Scans: the URL you submit. Results are generated on request and not saved to a database. Our host (Cloudflare) keeps short-lived request logs including IP address, time, and scanned domain, which we use for rate limiting and abuse prevention.
• Payments: handled by Stripe. We receive your email, the domain you purchased a report for, and payment status. We never see your card number.
• Newsletter: if you subscribe, your email is stored by Beehiiv. Unsubscribe anytime.
• Fix-It: if you grant repository access, we use it only to prepare your pull request and ask you to revoke it afterward.

What we don't do

We don't sell your data, we don't use cookies for advertising, and we never store the contents of exposed files or the value of any detected secret.

Your rights

Email support@shipaudit.dev to access or delete any data we hold about you.