Privacy policy
1. Controller
Omer Alsaloum, Sparkaßen 11/12, 5280 Braunau am Inn, Austria, email: sajad.vip56@gmail.com
2. Hosting
The website runs on a server of The Constant Company, LLC ("Vultr", USA) in a London data centre, United Kingdom. The United Kingdom is covered by an EU Commission adequacy decision. Data processing agreement under Art. 28 GDPR: [please confirm the Vultr DPA has been accepted].
3. Server logs
For every request the server stores the IP address, date and time, requested address, referrer and browser identifier. Purpose: operating and securing the website. Legal basis: Art. 6(1)(f) GDPR. Deleted after at most [server log retention, e.g. 14 days].
4. TLS scan
When you scan a domain we store the domain name and the result. We do not store your IP address in clear text, only a keyed hash (HMAC) used to limit abuse through excessive requests. The request count is deleted after 24 hours. Legal basis: Art. 6(1)(b) and (f) GDPR.
5. Cookie-free visitor statistics
For simple visitor statistics we store, per page view, the date, the page, the domain of the referring website and a hash of IP address and browser identifier that changes every day. It cannot be used to recover your IP address or to link visits across days. No cookies are set. Retention: 180 days. Legal basis: Art. 6(1)(f) GDPR.
6. Cookies
Our website sets no cookies for visitors. Only the operator receives a technically necessary cookie after logging in to the admin area. The PayPal button (see section 7) may set its own cookies.
7. Payments via PayPal
Payments are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. On the result and subscription pages the PayPal button is loaded from PayPal's servers, which transmits your IP address to PayPal. For a payment we transmit the amount and order reference. Legal basis: Art. 6(1)(b) GDPR. PayPal's privacy notice: paypal.com/at/legalhub/privacy-full.
7a. Payments with USDT/USDC
If you pay for the report with a cryptocurrency (USDT on Polygon or USDC on Arbitrum), we store the transaction hash and amount with your order. To check the payment our server queries public blockchain nodes (including Allnodes/PublicNode, dRPC and Offchain Labs) for this transaction; only the transaction hash is transmitted. Legal basis: Art. 6(1)(b) GDPR. Please note: blockchain transactions, including your sending address, are public and permanent and cannot be deleted by us. The payment goes to a deposit account at a crypto exchange (Binance or OKX).
8. Monitoring subscription
For a subscription we store your email address, plan, PayPal subscription ID, the domains you add, their scan results and alerts. Legal basis: Art. 6(1)(b) GDPR. The data are deleted after the contract ends unless statutory retention applies (accounting records: 7 years under § 132 BAO).
Free change alert: if you choose "Notify me" on a result page, we store your email address and the domain to check it weekly and tell you about changes. Legal basis: your consent (Art. 6(1)(a) GDPR), confirmed by a link (double opt-in). Unconfirmed requests are deleted after 7 days. You can withdraw consent at any time with the link in every email; your address is then deleted immediately.
9. Email delivery
Emails (access link, alerts) are sent through Resend, Inc., USA, which receives the email address and message content. Basis for the transfer to the USA: [please verify: EU-US Data Privacy Framework certification or standard contractual clauses].
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to sajad.vip56@gmail.com. You may also lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
Last updated: November 2026. In case of doubt the German version applies.