Privacy Policy

1. What We Collect

Scan queries: When you look up a file hash, URL, domain, or IP, that query is stored in our database along with the verdict and detection results. This is used to build the scan history feature.

IP addresses: Your IP address is used for rate limiting (3 lookups per 15 minutes). It is stored in a rate-limit bucket keyed by IP and date.

User accounts: If you register, we store your username and a hashed password. We do not store plaintext passwords.

Session data: If you log in, a session cookie is stored in your browser. Sessions expire after 7 days.

2. What We Do NOT Collect

File contents: Files are hashed in your browser using WebCrypto. The file itself is never uploaded to our servers. Only the hash value is transmitted.

Personal information: We do not collect names, email addresses, or other personal information unless you voluntarily provide it in a comment.

Tracking: We do not use third-party analytics or tracking services.

3. How We Use Data

• Scan queries are stored to provide the history and search features
• IP addresses are used solely for rate limiting
• User accounts enable comment posting and collection management
• Comments you post are stored in our database and may be synced to VirusTotal

4. Data Sharing

When you perform a lookup, the query is sent to the VirusTotal API. VirusTotal's privacy policy applies to that data. We do not sell, rent, or share your data with third parties except as required to operate the Service.

5. Data Retention

Scan history is retained indefinitely unless you request deletion. Rate-limit entries expire after 15 minutes. Sessions expire after 7 days. You may delete your account by contacting us.

6. Security

Passwords are hashed using SHA-256 with a per-user salt. Session tokens are cryptographically random. The Service is served over HTTPS. However, no method of transmission over the internet is 100% secure.

7. Your Rights

You may request deletion of your account and associated data by opening an issue on the project repository. You may clear your session cookie at any time by logging out or clearing browser data.

8. Changes to This Policy

We may update this Privacy Policy at any time. Continued use of the Service after changes constitutes acceptance.