Privacy

Draft, to be reviewed before launch.

When you run a scan we receive the address you enter and your IP address. We use your IP address only to limit how many scans one person can run, and we keep it in memory for at most one hour.

We keep scan results for up to 10 minutes so repeated scans of the same site are fast. Any secret we find is masked before it is shown, and we never store the full value.

If you join the waitlist we store your email address and the date you signed up. We use it only to tell you when full reports launch. To be removed, email privacy@getleakpatrol.com and we will delete it. The list is stored in Google Cloud in Europe.

If you buy a full report, Lemon Squeezy processes your payment. We never see your card details. We receive and keep your email address, order number and the site the report is for, so we can show you the report and help if something goes wrong.

If you verify that you own your site, we also check your Supabase database the way any visitor could, using the public key in your site's code. We read at most one row from each table to learn its column names, and we never store or show what is in your rows.

We do not use advertising or tracking cookies.