Privacy Policy | Scandars

Section 01

Privacy Overview

Scandars processes information needed to provide website security scans, user accounts, premium payments, reports and service support.

We aim to collect only information relevant to operating, securing and improving the service.

Website scan information may be based on publicly accessible DNS records, web responses, certificates and other public technical signals.

Section 02

Information We Collect

The information processed by the service may include:

Account Information

Name, email address, password hash, account role, account status and account timestamps.

Submitted Website Data

Domain names, URLs and related public scan targets submitted by users.

Scan Information

Results, findings, evidence, technical records, scores, grades and scanner performance metrics.

Transaction Records

Payment status, amount, currency and Stripe transaction references.

Service Logs

IP address, timestamps, errors, request information and security events needed to operate the service.

Communications

Messages sent through support or email communications.

Section 03

Website Scan Data

When you submit a website, the scanner may collect and store information such as:

Submitted and final website URLs.
Domain names and resolved public IP addresses.
Public DNS and email-security records.
HTTP response status and headers.
Public TLS certificate information.
Public cookies sent by the assessed response.
Technology fingerprints and public page-content indicators.
Scan findings, recommendations and generated reports.
Scan duration, request counts and transfer metrics.

The service does not require website login credentials for its normal passive external scans.

Section 04

Payment Information

Premium payments are processed through Stripe. Payment-card information entered during checkout is handled by Stripe under its own privacy and security practices.

We may store payment-related records such as:

Stripe checkout and payment references.
Payment amount and currency.
Payment status and timestamps.
The related free and premium scans.
Whether a premium entitlement has been successfully used.

Scandars does not need to store the complete card number or card security code entered into Stripe Checkout.

Section 05

Cookies and Sessions

The website may use cookies or similar browser storage needed for:

Authentication and account sessions.
Cross-site request protection.
Remembering login status.
Security and abuse prevention.
Maintaining checkout and user flows.

Disabling required cookies may prevent login, registration, payment or dashboard features from working correctly.

Section 06

How Information Is Used

Information may be used to:

Create and manage user accounts.
Perform requested website scans.
Calculate findings, scores and grades.
Generate and deliver PDF reports.
Process and reconcile premium payments.
Provide scan retries and payment entitlements.
Send account, report and password-reset communications.
Detect abuse, fraud and security threats.
Diagnose errors and improve service performance.
Meet legal and accounting requirements.

Section 07

Information Sharing

Information may be shared with service providers only when reasonably necessary to operate the service. Examples may include:

Stripe for payment processing.
Hosting and infrastructure providers.
Email delivery providers.
Security, logging and monitoring providers.

Information may also be disclosed when required by law, necessary to investigate abuse or needed to protect users, the service or the public.

We do not sell complete payment-card information collected through Stripe Checkout.

Section 08

Data Security

We use administrative and technical safeguards intended to protect service data. These may include:

Password hashing.
Session and CSRF protections.
Restricted administrative access.
Encryption for configured sensitive settings.
Request validation and rate limiting.
Logging and error monitoring.
Secure payment processing through Stripe.

No online service can guarantee absolute security. Protect your account by using a strong, unique password and keeping your email account secure.

Section 09

Data Retention

Account, scan, report and payment records may be retained while needed to provide the service, maintain account history, resolve disputes, prevent abuse and meet accounting or legal requirements.

Some information may remain in backups, security logs or transaction records for a limited period after deletion from active systems.

Retention periods may differ depending on the type of data and the reason it is stored.

Section 10

Your Choices

Depending on the available service features and applicable requirements, you may:

Review and update account information.
Change your account password.
Review your scans, reports and payments.
Request assistance with inaccurate account information.
Contact us regarding account deletion or privacy questions.

Certain payment, fraud-prevention, security or legal records may need to be retained even after an account request.

Section 11

Children’s Privacy

The service is intended for website owners, developers, agencies and other users able to enter binding agreements and obtain scanning authorization.

The service is not intentionally designed to collect personal information directly from young children.

Section 12

Policy Changes

This policy may be updated when service features, infrastructure, payment flows or privacy practices change.

The updated date at the top of this page identifies the current version.