Privacy Policy

This policy explains what VibeScan.us (operated by Three.group) collects, why, and how you can control it.

1. What We Collect

• Scan input: the URL you submit to be scanned, and the resulting findings, score, and evidence snippets from that scan.
• Account data: email address, and — for account holders opting into sign-in — an authentication identifier from our sign-in provider. We never see or store your password.
• Anonymous scan identifier: a cookie-scoped identifier that lets a scan you ran before signing up be claimed by your account after you sign up.
• Usage data: standard request logs (IP address, timestamp, endpoint) kept for abuse prevention and rate limiting.

2. What We Do Not Collect

We do not collect payment card details — those are handled entirely by Stripe. We do not sell your data to third parties.

3. How Scans Work

Scanning a URL you submit involves our service making read-only HTTP requests to that URL from our infrastructure. The scanned site's operator will see requests from our scanning infrastructure in their own server logs, the same as any other visitor.

4. Leaderboard Opt-In

The public leaderboard is strictly opt-in and defaults to off. If you opt a project in, only its name, URL, and overall score are shown publicly — never individual findings or evidence, even for opted-in projects. You can change this setting at any time from your account area.

5. Data Retention

Scan results are retained for as long as your account is active, or for anonymous scans, until claimed or a reasonable retention window elapses. You may request deletion of your account and associated data at any time.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting support@example.com.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by a new version date above.

8. Contact

Questions about this policy can be sent to support@example.com.