Legal
Privacy
Last updated 2026-09-18
Who is responsible
Axiobyte (Bucharest, Romania) is the controller of the personal data described here. Contact: hello@axiobyte.online.
What is stored
| Data | Why | How long |
|---|---|---|
| Email address and a scrypt hash of your password | To run your account and send password-reset and verification emails. | Until you delete your account. |
| Scans you run (URL, date, result) | Your scan history and the confidence timeline. | Until you delete your account. Anonymous scans are kept as public, unattributed results. |
| A keyed hash of your IP address | Rate limiting and counting unique visitors. The raw IP address is never written to the database. | Rate-limit counters: 7 days. Visitor counts: kept as aggregate daily figures. |
| Feedback you send about a verdict | To correct the detection rules. | Until reviewed, then kept with the review outcome. |
Cookies
Two strictly necessary cookies: a session cookie while you are signed in, and a security token that protects forms against cross-site request forgery. There are no advertising or tracking cookies.
When you scan without an account, the form includes Cloudflare Turnstile, a bot check. It runs a script from Cloudflare that looks at browser signals to tell people from automated traffic; Cloudflare sees your IP address and browser details for that check. Signed-in users do not see it.
Two kinds of files are loaded from other providers, which therefore see your IP address and browser details: the headline typeface (General Sans) from Fontshare, and the background video on the home page from its storage host. Neither sets cookies. The body typeface is served from this site.
Scanned sites
When you scan a URL, the page and a few related public files are downloaded from our server. Results are cached for 24 hours so repeat scans do not re-fetch the site. Values that look like secret keys are stored and shown only in redacted form.
Your rights
You can download everything stored about your account and delete your account at any time from the dashboard. Deleting it removes your email, password hash, sessions and tokens, and detaches your scans from you. Under the GDPR you also have the right to rectification, restriction and objection, and to complain to your data protection authority. For anything the dashboard does not cover, write to hello@axiobyte.online.