Privacy Policy

This policy describes the Vibe Scan site at scan.jdesignatio.com. Contact jdesignatio@outlook.com to ask a question or to request deletion.

When you scan a URL we store the hostname, the path, the scheme, the grade, the score, short notes, and each finding's type, severity, location, and a masked preview. We do not store the full secret. We do not store database rows. The anon key used for a deep check stays in memory for that request and is not written down.

Rate limits use a hash of the purpose and the client IP. We do not keep the raw IP in the database. The checkout flow sets one first-party cookie, vibescan_order, for one hour, so you can return from a payment page. It is HttpOnly. We do not run advertising or analytics cookies.

Paid orders store the product, amount, provider event id, and an unguessable access token. Monitoring stores the host and the grade history for that subscription. The mailer does not send email. If you join the waitlist while payments are closed, we store the address you submit, whether you asked about the report or monitoring, and the scan id from that form.

In test mode, no payment company receives the order. In live mode, Lemon Squeezy or Stripe processes the card on their site. Their privacy policy applies to that payment. We receive the webhook they send, including the order id we put in the checkout.

The public Vibe Security Index shows counts of grades and issue types. It does not list scanned domains. Operator stats are the same kind of counts, plus revenue totals, and they require a separate secret.

Say the hostname, the private link, or the waitlist address in an email to jdesignatio@outlook.com and we will delete the rows we hold. Payment processors may keep their own records.