Privacy

Public scans retain bounded evidence, status, hashes, and private report records. We do not store raw request headers, cookies, IP addresses, or page bodies in reports. Email unlock stores a one-way email hash unless an email provider is configured.

Optional analytics

Google Analytics 4 measures a bounded product funnel only after Analytics consent. Microsoft Clarity records masked public-page interaction only after separate Session replay consent. Neither service receives store domains, merchant evidence, email addresses, scan IDs, report tokens, raw errors, or private dynamic URLs.

Clarity is never loaded on scan progress, private report, comparison, or unlock/detail pages. You can reject, grant, or revoke either optional category using the Privacy settings control.