Privacy policy

Only what the domain publishes: DNS records, the TLS certificate its servers present, and the HTTP headers returned by its homepage and /.well-known/. We request the homepage once per scan. We do not attempt to log in, submit forms, scan ports, or crawl beyond those paths.

Reports are not listed in search engines. Every report page carries a noindex instruction and /d/ is disallowed in our robots.txt.

If you create an account: your email address, and the domains, monitors and alert settings you configure. If you subscribe: a customer record at Stripe. We never see your card details.

If you use the site without an account, we record your IP address for the length of time needed to enforce the daily scan limit, and a first-party cookie that ties your own actions together for our usage counts. Neither is shared, sold, or used to build a profile of you.

We use Plausible, which is cookieless and stores no personal data, plus a small table of our own recording product events such as “a report was viewed”. Those events carry a domain and a grade, never a person.

Our hosting and infrastructure providers, and the reputation sources we query while scanning — Google Safe Browsing, URLhaus, PhishStats and the public certificate transparency logs. Those queries contain the domain being scanned and nothing about you.

We do not sell data, and we do not share it for advertising.

Scan results are kept for as long as your plan’s history window allows — 7 days on Free, 90 on Monitor, two years on Agency. Rate-limit records expire after a day. Deleting your account removes your organisation and everything attached to it.

If you control a domain, you can have its report removed. Because an unverified request would let anyone hide anyone else’s report, we need proof of control first — one DNS record or one file. See removing a domain.

Privacy questions, removal requests and data requests: privacy@domaingrade.io.