Privacy notice

What we collect

Version 1.0 · 2026-09-07

A product that reports other people's tracking has to be able to survive its own report. This is the whole list.

This site sets no cookies and loads no third parties

Every font is served from this domain. There is no analytics, no advertising pixel, no session recorder, no tag manager, no chat widget, and no content delivery network. There is nothing to consent to, which is why you were not shown a banner. You do not have to take our word for it: put this domain into the scanner.

Your theme choice and, if you ever make one, your consent choice are kept in your browser's local storage. They never leave your device and are not readable by us. They are stored because you asked for a preference to be remembered, which is what the law calls strictly necessary.

What a scan collects

• The address you submit. Held for the duration of the scan and written to a server log. It is the thing you asked us to look at.
• The scan result. Free scan results are returned to your browser and not stored against you. Paid reports are stored so you can retrieve them.
• Your IP address, in ordinary server logs, used to apply rate limits and to keep the service up. Logs are retained for 30 days.

We do not build a profile of you, we do not sell or share anything, and we do not use any of it for advertising.

If you give us an email address

The pricing page lets you leave an address to be told when a paid tier is ready. We store the address, which tier you asked about, and the date. We use it for that one message and nothing else. Reply to any message asking to be removed and we delete the record.

Your rights

You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, and object to our holding it. Ask and we will do it. There is very little to hand over, which is the point.

Under the GDPR our lawful basis is legitimate interest for server logs and rate limiting, and consent for the notification list. Under California law we do not sell or share personal information as those terms are defined, and we honour Global Privacy Control automatically.

Where data goes

The service runs on infrastructure in the United States. Payment, when it exists, will be handled by a payment processor that receives your card details directly; we never see them. This notice will name that processor before any payment is taken.

Contact

Requests and questions: privacy@snitch.example. This address is a placeholder until the domain is live.