Privacy
This is a free tool run by an individual. Here is what is stored, for how long, and what is not collected.
What is stored when you run a scan
| Your request | The address you entered and the time. |
| About you | Your IP address (kept for 30 days for abuse prevention, then replaced by a one-way hash), your country, browser user-agent and the referring page. |
| The result | The public responses of the website you scanned (page source, headers, DNS records, certificate details) and the report derived from them. Retained indefinitely so results can be revisited. Screenshots and PDFs are deleted after about 90 days. |
| Who can see it | Results are reachable only through the unguessable link you receive. There is no public directory of scans and report pages are marked noindex. The operator can see all scans. |
What is not collected
| Tracking | No advertising and no tracking cookies. Page views are counted with self-hosted, cookieless Umami analytics; the only cookie is an admin session for the operator. |
| Cloudflare | Cloudflare sits in front of this site for protection; its privacy policy applies to that traffic. If a human check appears, that is Cloudflare Turnstile. |
| Scanned sites | They receive only ordinary read requests (see how it works). Set-Cookie values from scanned sites are redacted before storage. |
Your rights
You can ask for lookup records associated with your IP, or a report, to be deleted by emailing auth@farhan.app. Website owners can opt their domain out on the how it works page.