This policy explains what ScanYourSite (scanyoursite.app) collects, why, who processes it for us and how long we keep it. ScanYourSite is operated by Eugen Yushkevich, an individual based in Spain ([OWNER: NIF and postal address in Spain]), who is the controller of your personal data. Questions and requests about your data: support@scanyoursite.app.
What we collect
- Email address. Your account is your email: we sign you in with a one-time link and never ask for a password. We also store the email you enter when you request a paid plan.
- IP address and browser details. Used to limit abuse (rate limits). We record the IP address and browser user agent when you confirm ownership of a domain (together with the exact consent text you accepted), when someone asks us to stop checking a domain, and when you request a paid plan.
- Domains you check. The site addresses you enter, the monitors you set up and their schedules.
- Scan results. What our checks observed on the publicly reachable parts of the site — response headers, certificates, DNS records, page content needed for the checks — plus the score, findings, explanations and uptime history.
- Alert channels. The email addresses, Telegram chat IDs and webhook URLs you add for alerts.
- Cookies. A sign-in session cookie, a device cookie used to limit sign-in link requests, and a cookie that remembers your interface language. We use no advertising or third-party analytics cookies.
Why we use it
To run the checks you ask for, send the reports and alerts you set up, sign you in, issue and apply plan codes, prevent abuse of the scanner and answer complaints from site owners and hosting providers. We do not sell personal data and do not use it for advertising.
Who processes it for us
- Hetzner Online GmbH (Germany) — servers and the database where all of the above is stored, and our backups.
- Resend (USA) — delivers our emails: sign-in links, reports, alerts and plan-request confirmations.
- Anthropic (USA) — writes the explanations and fixes in reports. It receives the scan results of the checked site, not your email address.
- Cloudflare (USA) — DNS for our domain and routing of email sent to our addresses.
- Polar (USA) — sells our paid plans as merchant of record when you subscribe by card, together with its payment processor Stripe. They receive your email, billing details and payment information; we receive only your email, plan and subscription status.
- If you choose Telegram or a webhook for alerts, the alert text goes to Telegram or to the address you entered.
- Telegram (operator notifications) — when you request a paid plan, your email, the site, your note and your IP address are sent to the operator's private Telegram chat so the request is answered quickly.
Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses.
How long we keep it
- Account, monitors, alert channels and scan reports — while your account exists.
- Uptime check history — 30 days.
- Sign-in sessions — 30 days; sign-in links expire after 30 minutes.
- Ownership confirmations and opt-out requests, with their IP addresses — while they are needed to answer complaints about our checks, at most 3 years after the confirmation or request ends.
- Plan requests — 24 months, for accounting.
- Reports of checks run without an account — 12 months.
- Database backups — 14 days (the last seven daily backups are kept regardless of age).
When you ask us to delete your account, we delete it within 30 days; copies in backups expire on the schedule above.
Your rights
You can ask for a copy of your data, correction, deletion or export, and you can object to processing: write to support@scanyoursite.app from your account email. If you are in the EU or the UK, you can also complain to your data protection authority.
Changes
We will publish changes on this page with a new date. Significant changes will also be announced by email to account holders.