Privacy

Short version: SiteSafeCheck keeps as little as it can, for as short a time as it can, and sells nothing.

What we store

The domain you check and its report are cached for about 10 minutes so repeat checks are instant and the same site isn't scanned over and over.
A one-way hash of your IP address is kept for up to about a day to enforce fair-use limits. We don't store the IP address itself.
We don't ask for your name or email, and we don't use accounts.

Google Gemini: to write the plain-English explanations, the scanned domain and its findings are sent to Google's Gemini API. Nothing about you is included.
Google Analytics: if analytics is turned on, it counts visits and events like "scan started" and the grade a report got. The domain you check is not sent to analytics.
Hosting: the site runs on Vercel, which keeps standard server logs.
The site you check sees a handful of requests from our server identified as SiteSafeCheck/1.0. It doesn't see your IP address.

If you call, text, or email Nick from a report, that conversation is just between you and him. He uses it only to reply to you.