Privacy

If you only run a scan

We store the repository name, the score, the findings, and a truncated network prefix of your IP address — the first three octets for IPv4, the first three groups for IPv6. The full address is never written down. The prefix is enough to spot abuse from one network and not enough to identify you.

Your repository's file contents are read into memory to run the checks and are not persisted anywhere.

If you give us an email

We store the address, the time you submitted it, the page you submitted it from, your IP address, your browser's user-agent string, and the exact consent wording shown to you at that moment.

That last set exists because GDPR Art. 7(1) requires a controller to be able to demonstrateconsent. It's the record that proves you asked for this — which is also what protects you from someone else adding your address.

The address is not mailable until you click the confirmation link. If you never click it, you never hear from us again.

Who else sees it

Our email delivery provider, purely to deliver the message, and our database host. Nobody else. It is never sold, rented, traded, or contributed to any shared list or data broker.

How long

Scan records: 12 months. Subscriber records: until you unsubscribe, plus a suppression entry kept indefinitely afterwards. That entry is deliberate — it is the only way to guarantee you are never re-added by a later signup.

Your rights

Access, correction, erasure, portability, and withdrawal of consent. The unsubscribe link in every email handles withdrawal instantly, with no login. For anything else, mail ceo@theappmakerpro.com — we respond within 30 days, as Art. 12(3) requires.

Cookies

One localStorageentry recording whether you chose light or dark. That's it — no tracking cookies, no advertising pixels, no third-party analytics scripts. Nothing here requires a consent banner, which is why you aren't looking at one.