Privacy Policy
Version 2026-10-17 · last updated 17 October 2026
Not yet reviewed by a lawyer. This describes accurately what we collect and what we do with it. It should be reviewed before the service takes money from strangers.
Who holds your data
Hefes LLC, a Wyoming limited liability company. Your data is stored on a server we control in Nuremberg, Germany (Hetzner).
What we collect
| Your account | Email address, a hash of your password, and — if you enable it — your two-factor secret and recovery codes. We never store your password itself. |
|---|---|
| Your domains | The domain names you add, the verification token, how you proved control, and when. |
| Authorisation records | The exact wording you accepted, its version, the time, and the network address it came from. This is the evidence that a scan was permitted, so it is kept longer than most things here. |
| Scan results | What the scan found about your systems, and the reports generated from it. |
| Payment | A Stripe customer reference, a payment-method reference, and the card's brand and last four digits — so you can recognise which card it is. |
| Admin access | If a member of our staff opens your account or your report, that access is logged with who and when. |
What we deliberately do not collect
- Your card number. It goes from your browser to Stripe and never reaches our servers.
- Identity documents. We do not run an identity check and never ask for a passport, an ID card or a photograph of you.
Analytics, and the cookie banner
Our public pages can load Google Analytics, which sets a cookie and tells us how many people arrived and which pages they read. We have turned off advertising features and ad personalisation, and IP addresses are truncated before they are stored.
It does not load until you say yes. The first time you visit, a banner asks. Until you accept, no request is made to Google at all — not a blocked cookie, not a request with consent withheld, simply no request. Accept and reject are the same size and take the same single click.
Your answer is kept in your own browser's local storage, not in a cookie we read, and never leaves your device. You can change it at any time with Cookie choices in the footer of any public page. Clearing your browser data clears the answer, and the banner will ask again.
Analytics is not loaded on your dashboard, your reports or anything behind a login, and it is never connected to your account, your domains or your scan results. Nothing on this site depends on the script loading — if you reject it, or block it, everything works.
Who else processes it
| Hetzner | Hosting (Germany) |
|---|---|
| Stripe | Payments |
| Cloudflare | DNS and traffic protection |
| Google Analytics | Visitor counts on public pages, only with your consent |
| HyperCluster | Tamper-evidence records — see below |
Something that cannot be deleted
Please read this before you sign up.
So that a report can be proved unaltered later, we publish a record of every completed scan, free or paid, to the HyperCluster blockchain. That record contains the domain name, a reference number, the time of the scan, and a cryptographic hash of the report — a fingerprint from which the report cannot be reconstructed.
These records are permanent and we cannot remove them. If you ask us to delete your account we will delete your data from our systems, but any record already published to the chain will remain, including the domain name. This applies to free scans as well, so a free scan also leaves a permanent record of the domain name. No scan findings and no personal details beyond the domain name are ever published this way.
How long we keep things
- Reports: 12 months, then deleted.
- Authorisation records: kept after account closure, because they are the evidence that a scan we performed was permitted.
- Account and scan data: until you close your account.
- Admin access logs: retained, so we can always answer who looked at what.
Your rights
You may ask for a copy of your data, have it corrected, have it deleted, or object to how we use it. Email [email protected] and we will respond within 30 days. Depending on where you live you may also complain to your local data protection authority.
Security
Passwords are hashed with bcrypt. Two-factor authentication is available and required for our own staff accounts. Traffic is encrypted in transit. Backups are encrypted before they leave the server.