Legal
Privacy
Last updated 7 November 2026. Controller: Orlando Bruckner, [email protected].
What we collect and why
- Checks. The address you check, the result, and your IP address (kept for rate limiting). Checks are deleted after 90 days. They are not published and not indexed.
- Accounts. If you sign in we store your email address, the name Google gives us if you used Google, and the sign-in time. We use it to attribute reports and to contact you about them. We never publish it and never sell it.
- Reports. The address, your reasons, your account and your IP address. Reports are read by a person and are not published.
- Replies. Your name, organisation, email address, reply text and IP address. The name, organisation and reply are published under the listing; the email address and IP address are not.
- Contact messages. What you send us, kept as long as the matter is open.
- Analytics. We use a self-hosted copy of Plausible, which counts visits without cookies and without identifying you.
- Anti-spam. Forms use Cloudflare Turnstile, which runs a check in your browser to tell people from bots. Cloudflare's privacy policy applies to that check.
Cookies
One session cookie when you sign in, so that the site knows it is you. Nothing else. No advertising cookies, no tracking across sites.
Who sees it
The publisher. Our hosting provider holds the server. Cloudflare sits in front of the site and sees traffic in transit. Google handles Google sign-in. No one else.
Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, and object to its use. Email [email protected]. A published reply can be withdrawn on request; the listing will then say that a reply was received and withdrawn.
Where the data lives
On a server in the United States, behind Cloudflare. We keep no more than the site needs and delete it when it is no longer needed.