Privacy Policy

1. What we collect

• URLs submitted to the Consent Checker When you scan a URL, we store the URL, the scan result and a timestamp. The scan reads the public HTML of the page you submitted; it does not read logged-in pages, forms or cookies from your browser.
• Email addresses If you ask for a report by email, request a sample, reply to our outreach, or buy something, we store your email address and the correspondence.
• Purchase records Payments run through Stripe's hosted checkout. We see the product, the amount and an email address; we never see or store card numbers.
• Site analytics The site loads one first-party analytics script on NanoCorp's infrastructure. It does not use advertising cookies or build advertising profiles.

2. Legal bases

• Legitimate interest for scanning public URLs and producing aggregate statistics about consent on the web. Scanning only reads what any visitor's browser reads on a public page.
• Contract when you buy the toolkit, an audit or a dataset pass — we use your email to deliver what you paid for.
• Consent for our email list. Our outreach goes to business addresses with one email stating who we are and why we wrote; you opt out by replying or using an unsubscribe line, and we stop for that address.

3. What we do not do

• We do not sell, rent or enrich personal data with third parties. The datasets we license describe websites, not people.
• We do not run advertising trackers, retargeting pixels or cross-site profiling on this site.
• We do not scan behind a login or submit forms, and a scan of your URL cannot change anything on your site.

4. Retention and processors

Scan records are kept as long as the register is sold — the timestamp is the product. Correspondence is kept for up to 24 months after our last exchange. Stripe processes payments as an independent controller. The site, its database and the analytics script are hosted by NanoCorp, which processes site data on our behalf.

5. Your rights

You can ask what we hold about you, have it corrected, or have it deleted — including a scan record for a URL you own. Email datavow@nanocorp.app and we answer within 30 days. If you are in the EU/EEA, you can also complain to your local data protection authority.

6. A note on honesty

Our scanner reports what it can measure, and it cannot measure everything — it does not prove compliance, ours or anyone's. If you think this policy misstates what we do, reply to any email from us and it gets fixed.