Legal
Privacy
Last updated 2026-09-18
Who is responsible
Axiobyte (Bucharest, Romania) is the controller of the personal data described here. Contact: hello@axiobyte.online.
What is stored
| Data | Why | How long |
|---|---|---|
| Email address and a scrypt hash of your password | To run your account and send password-reset and verification emails. | Until you delete your account. |
| Scans you run (URL, date, result) | Your scan history and the confidence timeline. | Until you delete your account. Anonymous scans are kept as public, unattributed results. |
| A keyed hash of your IP address | Rate limiting and counting unique visitors. The raw IP address is never written to the database. | Rate-limit counters: 7 days. Visitor counts: kept as aggregate daily figures. |
| Feedback you send about a verdict | To correct the detection rules. | Until reviewed, then kept with the review outcome. |
Cookies
Two strictly necessary cookies: a session cookie while you are signed in, and a security token that protects forms against cross-site request forgery. There are no advertising or tracking cookies.
When you scan without an account, the form includes Cloudflare Turnstile, a bot check. It runs a script from Cloudflare that looks at browser signals to tell people from automated traffic; Cloudflare sees your IP address and browser details for that check. Signed-in users do not see it.
Page views are counted with Vercel Web Analytics, which uses no cookies and does not identify you: it records the page, the referring site, your country and your device type.
Typefaces, images and the background video are all served from this site; no font or media provider sees your visit.
Scanned sites
When you scan a URL, the page and a few related public files are downloaded from our server. Results are cached for 24 hours so repeat scans do not re-fetch the site. Values that look like secret keys are stored and shown only in redacted form.
Browser extension
The AI Site Check extension reads the address of the current tab only at the moment you click its button or its menu entry, and opens this site with that address filled in. It runs no code on the pages you visit, stores nothing, and sends nothing anywhere else. From there the scan is handled exactly as if you had typed the address yourself, under the rules on this page.
Your rights
You can download everything stored about your account and delete your account at any time from the dashboard. Deleting it removes your email, password hash, sessions and tokens, and detaches your scans from you. Under the GDPR you also have the right to rectification, restriction and objection, and to complain to your data protection authority. For anything the dashboard does not cover, write to hello@axiobyte.online.