Privacy Policy
What this service stores, for how long, and why — in plain language. Short version: we keep your check results and a technical session cookie; nothing is shared with third parties.
This policy describes how the service ("we") handles information when you use the bulk-check tools, the instant single-domain checks, the monitoring and the API. It applies to every page of the site. The service is technical infrastructure: it makes HTTP, DNS, TLS and registry (RDAP/WHOIS) requests to the addresses you submit and shows you the results. It does not run advertising, does not embed third-party scripts and does not build behavioral profiles — there is simply nothing of that kind in the codebase.
What we store
Jobs and results. Each submitted list is saved as a job: the input lines, the module used, the check settings and the results. This is what the report link opens and what the CSV export reads. Jobs are deleted automatically after the retention period configured for this installation (the default is 7 days; the exact value is shown on every tool page).
Session anchors. To count rate limits fairly and to show you "my recent jobs", we store a random session token in a cookie, a salted hash of your IP address and a salted hash of the session token. The hashes cannot be reversed to an IP address or a session token. An account, if you create one, additionally holds your e-mail and an Argon2id password hash.
Instant-check cache. Results of single-domain checks are cached for a short time (minutes) so that repeated opening of the same link does not re-check the target. The cache stores the target address and the result only.
Cookies and local storage
The service sets a small number of strictly necessary cookies and, in your browser, a few local-storage keys. None of them are used for tracking or advertising; the consent banner you saw exists to inform you about them, as required by ePrivacy/GDPR-style rules. You can clear all of them at any time in your browser settings — the service keeps working, it will simply "forget" your theme, language and recent-jobs list.
| Cookie / key | Purpose | Lifetime |
|---|---|---|
anon_token | Session and "my recent jobs" (anonymous visitors) | ~90 days |
bc_csrf | CSRF protection of forms (double submit) | session (until the browser is closed) |
bc_theme | Your light/dark theme choice | ~180 days |
bc_consent | Your "cookies acknowledged" flag | ~365 days |
PHPSESSID | Server session (signed-in users only) | session (until the browser is closed) |
bc_recent (localStorage) | Local backup of the recent-jobs list (survives cookie reset) | until you clear it |
bp_form_opts:* (localStorage) | Your last check settings per tool (thresholds, record types) | until you clear it |
Third-party cookies are not set by this service, and no third-party scripts are loaded from our pages.
How long we keep it
Jobs and their results: until the end of the retention period (see above), then a scheduled cleanup deletes them completely. Instant-check cache: minutes. Aggregated anonymous counters shown on the Statistics page: they contain no addresses and no identifiers. Rate-limit counters: one hour. If you delete your account, its data is removed with it.
Third parties
Checks run against the sites you submit — those servers naturally see our requests in their logs, like any other visitor. Domain-registration checks query public RDAP/WHOIS registries. We do not send your lists to anyone else: there are no analytics providers, no ad networks and no data brokers in the loop. Public webhooks in Monitoring deliver only to the URL you configure yourself.
Your choices
You can clear cookies and local storage at any time; use the report link sharing consciously (anyone who has the link can view the report — do not submit confidential internal addresses); ask for deletion of your account and its jobs; and, since this is a self-hostable project, inspect the full source code of everything described here.
Contact
Questions about privacy: [email protected]