Privacy Policy

Last updated: September 5, 2026

1. What we collect

We keep the information we collect to a minimum. When you use AppSafe, we collect:

• Your account details: Your name, email address, and profile picture, as shared by Google or GitHub when you sign in.
• The websites you add: The web addresses you ask us to scan and the details needed to confirm you own them.
• Scan results: What each scan found, the resulting score, and when it ran. If a scan spots something like an exposed password or key, we only keep a masked hint of it, never the full value.
• Shared reports: If you share a report publicly, the findings shown on that report page.
• Billing details: A reference to your subscription with our payment provider. Your card details go directly to the payment provider and never reach us.
• Sign-in records: Basic details about each device you sign in from, such as its network address and browser type, so we can keep your account secure.

2. How we use it

• To run the security scans you ask for and show you the results.
• To check that you own the websites you add.
• To email you about your account and your scans.
• To keep the service fair and stop abuse.
• To look into reports of misuse, payment problems, or security incidents.
• To improve our scans and the service as a whole.

3. How we keep it safe

Your data is stored on secure servers and protected with industry-standard safeguards. You sign in through Google or GitHub, so we never see or store your password. Anything that looks like a secret in your scan results is masked before we save it. Even so, scan results can reveal weaknesses in your website, so treat them as confidential. We never sell your personal data.

4. How long we keep it

We keep your account details for as long as you have an account. We keep scan results so you can see how your security improves over time. You can delete your account, along with your websites, scans, and reports, at any time from your dashboard. Deletion is immediate and cannot be undone. We may keep a small amount of information where the law requires it, for example for tax, fraud prevention, or payment disputes.

5. Who we share it with

We work with a few trusted partners to run AppSafe:

• Google and GitHub: To sign you in, if you choose to use them.
• Stripe: To handle payments, subscriptions, and invoices.
• An email delivery service: To send you account and scan emails.
• Hosting providers: To run the service and store your data.

These partners may handle data outside your country. Where the law requires it, we rely on the safeguards those partners provide for international transfers.

6. Cookies and analytics

We use a small number of essential cookies: one keeps you signed in, and one remembers your cookie choice. These are needed for the site to work.

We use a privacy-friendly analytics tool that we host ourselves to understand how the site is used. It only gives us overall statistics, such as which pages are visited and from which countries. It does not track you across other websites or share anything with advertisers.

We also use the Meta (Facebook) Pixel to measure how well our advertising works. It sets cookies from Meta and shares your visit with Meta Platforms, which may combine it with other information Meta holds about you. See Meta's privacy policy for details.

If you are in a region where consent is required, such as the EU, analytics and the Meta Pixel only run if you choose “Accept cookies” in the banner. Choosing “Essential only” keeps them off, and the site works just the same. You can change your mind at any time using “Cookie settings” in the footer. We remember your choice for one year.

7. Your rights

Depending on where you live, you may have the right to:

• See the personal data we hold about you.
• Ask us to correct anything that is wrong.
• Delete your account and everything linked to it (you can do this from your dashboard).
• Get a copy of your account, website, and scan data by contacting us.
• Withdraw your consent at any time.
• Object to, or ask us to limit, how we use your data.

You can also contact us if a public report shows information you believe should be taken down.

8. Contact

For any privacy question or request, use our contact form.

9. Changes

We may update this policy from time to time. If we make important changes, we will let you know by email.