Privacy
Privacy-first by design
We only keep what we need to calculate scores and deliver the features you opt into. No third-party ad trackers. No fingerprint resale.
What we collect
Browser fingerprint data stays client-side by default. IP metadata is processed at the edge for analytics and rate limiting. Optional shared reports are stored in D1 with a 30-day TTL.
How we use data
To generate trust scores, improve detection quality, and operate automation queues. We never sell fingerprint data and do not build marketing profiles.
Retention
Shared reports auto-delete after 30 days. Task/webhook logs rotate every 14 days. KV caches expire within 24 hours.
Your controls
Run scans anonymously, skip Turnstile, or delete shared reports anytime via the report page or API.