Privacy Policy
Last updated:
This Privacy Policy describes how PrivacyProbe (“we”, “us”) collects and processes information when you visit our website, request a scan, or interact with our services.
Information we collect
We gather limited personal data to operate our scanning platform and respond to enquiries:
- Account details. Email address and authentication credentials when you create an account.
- Scan data. URLs submitted for analysis together with the resulting request and response metadata, raw Set-Cookie strings, document.cookie values, and the cookies detected during each scan session.
- Usage data. IP address, user agent, and coarse location information supplied by our edge provider to help secure and operate the Service.
How we use information
We process collected data for the following purposes:
- Delivering and improving the PrivacyProbe scanning experience.
- Generating and delivering scan reports.
- Detecting and preventing abuse of our platform.
- Communicating service updates and responding to support requests.
Legal bases for processing
Where the UK GDPR or GDPR applies, we rely on the following legal grounds:
- Contract. We process account administration, scan execution, and report delivery to perform our agreement with you (Article 6(1)(b)).
- Legitimate interests. We process platform analytics, product improvement, and security monitoring to operate a safe and effective service (Article 6(1)(f)). You may object to processing based on our legitimate interests by emailing privacy@privacyprobe.io. We will review your request and stop or limit processing where the law requires.
- Legal obligations. We process information when necessary to comply with applicable law, such as responding to lawful requests or meeting tax and accounting duties (Article 6(1)(c)).
How we share information
We rely on trusted service providers to run the platform:
- Cloudflare. Hosts our edge infrastructure, executes the headless scans, and provides security and abuse-prevention services that process submitted URLs and the resulting metadata needed to fulfil your requests.
- Supabase. Authenticates accounts and stores account-linked scan history, including the artefacts you choose to keep or delete in the dashboard.
We maintain data processing agreements and appropriate transfer safeguards with these providers and do not sell personal data.
Data retention
Saved scan artefacts in your account remain in our Supabase workspace until you delete them or close your account, allowing you to maintain an audit trail. Account records persist while your account is active and for any additional period required by law. Security and abuse logs may be retained longer to protect the Service.
Your rights
Depending on your jurisdiction, you can request access, rectification, deletion, restriction, or portability of personal data we hold about you, object to processing based on legitimate interests, and request human review of any automated decision-making. You may also lodge a complaint with a supervisory authority. Submit requests to privacy@privacyprobe.io; we verify your identity before acting and aim to respond within 30 days (we may extend by up to 60 days for complex matters and will let you know if that happens).
Security
We rely on Cloudflare’s infrastructure, encrypted transport (HTTPS), and scoped access controls within Supabase to protect collected data. While no service can guarantee absolute security, we monitor access continuously and review vendors annually.
International transfers
Data may be processed in the UK, EU, or United States. When transferring outside your jurisdiction, we use standard contractual clauses or equivalent safeguards.
Contact
Questions about this policy or our privacy practices can be sent to privacy@privacyprobe.io.