Privacy Policy
Last updated October 18, 2026. We collect as little as we can.
What we collect
- Free scans: the URL you scan and your IP address (used only for rate limiting; rate-limit counters expire within minutes). We don't store free scan results.
- Subscribers: your email, your Stripe customer and subscription IDs, plan and status, the app URLs you add, verification tokens, and your weekly scan reports.
- Waitlist: the email you submit.
We never see your card details: payments are handled by Stripe.
Why
To run the scans you asked for, email you reports and alerts, manage your subscription, and prevent abuse. We don't sell your data and we don't use it for advertising.
Who processes it
- Stripe for payments and the customer portal (Stripe privacy policy).
- Cloudflare for hosting, storage and sending email (Cloudflare privacy policy).
Scan data
Reports may include short, masked snippets of secrets found in your public code (for example the first and last few characters of a key) so you can tell which key leaked. We never store full secrets on purpose.
Retention and deletion
We keep subscriber data while your subscription is active and for up to 90 days after it ends, then delete it. Remove an app from your dashboard to delete its reports immediately. To delete everything, email support@shipwatchhq.com.
Cookies
No tracking cookies. The dashboard keeps your private sign-in token in your browser's local storage on your device.