Privacy policy

Last updated 2026-08-26.

What we store

• Scans: the URL, the resulting report and a timestamp. Reports created from the public form are public by default.
• Accounts: your email address and a scrypt hash of your password. We never see the password itself.
• Billing: a Stripe customer id. Card details are handled entirely by Stripe and never touch our servers.
• Rate limits: a counter keyed by a hash of your IP address, kept for a few days.

What we do not do

No third-party analytics, no advertising pixels, no session recording, no selling of anything to anyone. The only outbound requests this service makes are to the sites you ask it to scan and to Stripe.

Deletion

Email hello@axray.dev and we will delete your account, scans and history within seven days.