Privacy

• We store the domain you scanned, the time, the grade, the score and the full result for 30 days. Then it is deleted.
• If you tick the deeper check, we also record that you confirmed you are authorised to scan the domain, and when. We store the findings and the facts we read (for example certificate dates, open ports listed in a public database, and which scripts a page loads), not the pages or files themselves. PENDING LEGAL REVIEW.
• For the deeper check, the domain name is sent to an independent TLS assessment service and an independent website security scan, which then contact the domain themselves. For the standard check we send only the domain or its public addresses to public databases.
• The full report is shown only through a private link we email to you after you give your email and consent. Until then the page shows a summary only.
• We do not store your IP address. We keep a salted hash of it to limit abuse.
• Report links use a long random ID. Reports are not indexed by search engines. Anyone with the link can view the report, so share it with care.
• We use Cloudflare Turnstile to block bots, and Cloudflare Web Analytics, which does not use cookies, to count page views.

The lead form is optional. If you use it, we store your email, and your name and company if you give them, with the domain, the report ID, the page you came from, the time, and the exact consent wording you agreed to. We use it to send the report you asked for and to follow up about it.

Email contact@securelyn.in and we will delete your details on request. To stop scans of a domain you own, see opt out.