Privacy Policy

1. Information We Collect

In the course of providing our security scanning service, the Platform may collect the following information:

• •The target website URL you submit for scanning
• •Your IP address (used for rate limiting to prevent service abuse)
• •Basic device information such as browser type and operating system (automatically transmitted via standard HTTP headers)
• •Scan result data (temporarily stored in server memory)
• •Usage data and cookies collected via Google Analytics

2. How We Use Information

The information we collect is used solely for the following purposes:

• •Providing website security scanning services and generating reports
• •Implementing rate limiting to ensure service stability and fair usage
• •Improving and optimizing the quality of our services
• •Preventing malicious abuse

3. Data Storage and Retention

The Platform uses an in-memory caching mechanism. All scan results are temporarily stored in server memory only, with no persistent database. Specific retention periods are as follows:

• •Scan result cache: automatically cleared after 5 minutes
• •Scan job records: automatically deleted after 10 minutes
• •Rate limit records: automatically expire after a maximum of 5 minutes
• •All cached data is cleared when the server restarts

4. Information Sharing and Disclosure

The Platform does not sell, trade, or otherwise transfer your personal information to third parties. During the scanning process, the Platform accesses the following publicly available third-party APIs:

• •WordPress.org API — for querying plugin, theme, and core version information
• •Wordfence Intelligence API — for querying the known security vulnerability database

These queries only transmit plugin/theme names and version numbers of the target website and do not involve your personal data.

5. Cookies and Tracking Technologies

The Platform uses cookies, specifically via Google Analytics, to help us analyze how users use the site. These cookies track visitor usage patterns and help us improve our service. You can control or delete cookies through your browser settings.

6. Third-Party Services

The Platform performs passive security checks on target websites. Additionally, we use Google Analytics to analyze service traffic. Google operates as an independent third-party service provider and may collect information in accordance with its own privacy policy.

7. Information Security

The Platform implements reasonable security measures to protect your information, including:

• •SSRF protection mechanisms to prevent internal network scanning
• •Input validation and sanitization to prevent injection attacks
• •Rate limiting mechanisms to prevent service abuse
• •No storage of sensitive personally identifiable information

8. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children.

9. Policy Changes

The Platform reserves the right to modify this Privacy Policy at any time. Changes will take effect immediately upon posting on this page. We recommend that you review this policy periodically for updates.