Privacy

Last updated: October 17, 2026.

The short version: we do not keep the text you check.

• Your text. It is checked in memory, in the request that sent it, and then discarded. It is never written to a database, a log or a file, never sent to anyone else, and never used to train anything.
• What we keep for each check (the receipt). The time, the number of bytes, the rule set used, the result, and how many findings of each severity. We also keep a keyed fingerprint of the text. It lets us confirm that a receipt matches a text you show us; it cannot be turned back into the text. We do not keep the text's plain hash, any finding, or any part of a secret.
• Your account. Your email address, your account's credit history (free credits, purchases and checks), and your keys. Keys are stored only as a keyed fingerprint, so we cannot see or recover a key.
• Rate limits. To stop abuse, we count requests per minute by a keyed fingerprint of the IP address, and delete those counts after two days.
• Payments. Payments are made on Stripe's own checkout page. We never see or store your card. Stripe tells us that a payment was completed, for which pack, and for which account.
• Sign-in emails. Sign-in codes are sent by our email provider, Resend. It receives your email address and the code, and nothing else.
• Who processes data for us.
  • Cloudflare runs the service and its database.
  • Stripe handles payments.
  • Resend sends sign-in emails.

  We do not sell or share your data with anyone else.

• Cookies. The dashboard uses one sign-in cookie, needed to keep you signed in. There is no advertising or tracking.
• How long we keep it.
  • Receipts (one per check): 400 days, then deleted.
  • Credit history (free credits, purchases and checks): as long as tax law requires us to keep business records. It never holds your text.
  • Sign-in sessions: 12 hours.
  • Rate-limit counts: two days.
• Your choices. You can ask us to close your account and delete your email address; we keep the receipts and credit history, without your email, as business records for the times above. Write to hello@webhatchdesigns.com, or reply to any email from us.
• Changes. If this policy changes, the date at the top changes.