Privacy Policy
Last updated: June 4, 2026 · Effective immediately
1. Information We Collect
Account Information
When you create an account, we collect:
- Your full name
- Your email address
- Your avatar URL (if you sign up via Google or GitHub)
- Your password (hashed and encrypted via bcrypt)
Usage Data
We automatically collect and store:
- Website URLs you submit for scanning
- Scan results, scores, and recommendations
- Points balance and transaction history
- Subscription status and billing information
- Login timestamps and activity streaks
- Referral codes and referral relationships
Local Storage
We store up to 5 recently scanned URLs in your browser's localStorage for convenience. This data never leaves your device.
2. How We Use Your Information
- Provide and maintain the scanning service
- Process scan requests and generate reports
- Manage your points balance and subscription
- Process payments through our payment processor (Stripe)
- Send service-related notifications
- Improve the Service and develop new features
- Prevent fraud and abuse
- Comply with legal obligations
4. Data Storage and Security
Your data is stored in:
- Development: SQLite database
- Production: Cloudflare D1 (distributed SQLite)
We implement industry-standard security measures including password hashing (bcrypt), input sanitization (DOMPurify), session management (7-day expiry), and HTTPS encryption for data in transit.
5. Third-Party Scanning
When you submit a URL for scanning, our crawler (User-Agent: AgentReadyScanner/2.0) makes HTTP requests to the target website to collect publicly available information such as robots.txt, meta tags, and protocol endpoints. We do not collect personal data from scanned websites. The scan results are associated with your account and stored in our database.
6. Data Retention
We retain your account data, scan history, and points ledger for as long as your account is active. If you wish to have your data deleted, contact us at contact@geokami.com. We will process deletion requests within 30 days.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access a copy of your personal data
- Request correction of inaccurate data
- Request deletion of your personal data
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
To exercise these rights, contact contact@geokami.com.
9. Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact
For privacy-related questions, contact us at contact@geokami.com.