Privacy notice

This is a small self-hosted service operated by the instance owner. It is not a managed service with an uptime guarantee.

One-time URL checks

The app does not save URLs or results submitted to the one-time checker in its database. It makes one HTTP or HTTPS request to the submitted public address from the operator's host. The destination site receives that request and may record it; some links can trigger actions when requested. Do not submit private links, password-reset or confirmation links, unsubscribe links, or URLs containing passwords, access tokens, or personal information.

Optional threat lookup

If the operator configured Google Safe Browsing, you can choose to send the full URL to Google for a threat-list lookup. Google may use and share URLs submitted to this API. This lookup is optional; see Google's terms before using it. To honor Google's cache instructions, the app temporarily keeps a keyed digest of the URL and the lookup result in memory, for up to 30 minutes for a match and 24 hours for no match; it does not keep the raw URL in that cache. A match or no-match result is not a guarantee of safety or accuracy.

Account monitoring

If you sign in to use monitor features, the service stores your username, a password hash, a recovery-code hash, monitor names and URLs, check results and error summaries, and any webhook URL you configure. Webhook URLs are encrypted in SQLite. Passwords and recovery codes are stored as one-way hashes. The instance operator controls the host and database and can access stored account data.

Anti-abuse checks

One-time checks use Cloudflare Turnstile. Its browser widget and verification service are provided by Cloudflare. The service also keeps short-lived, in-memory check-rate data keyed by a keyed hash of the connecting address. See Cloudflare's privacy policy.

Retention and deletion

One-time check results are not retained by the app. Signed-in users can delete their account from Account settings. Operator backups may retain deleted account data until those backups expire.