Privacy Policy

We try to collect as little as we can and to be plain about what we do collect. This page describes the product as it works today. We will update it as accounts and payments come online.

What we collect

• The address you enter to scan, so we can run the scan and label the result.
• The result of the scan, which describes issues found on the public pages and JavaScript at that address.
• A short operational log of each scan: the address, the time, and a summary of the result.
• The network (IP) address a request comes from, which we use to limit how often the service can be called.
• Account details, which for now are kept in your browser on your device rather than on our server.

How a scan works

When you run a scan, the address you enter is sent to our server. The server fetches the public pages and JavaScript at that address, the same files a browser would receive, and checks them for the problems listed on the site. It does not sign in, submit forms, or reach anything behind a login. It only requests addresses that are publicly reachable.

How we use what we collect

• To run your scan and show you the report.
• To keep the service working, and to protect it from abuse and overload.
• To understand and fix problems with the service.

We do not use your data to advertise to you, and we do not run third-party advertising trackers on the site.

How long we keep it

A finished scan is held on our server for about thirty minutes so you can open and read the report, after which it is dropped. The short operational log is kept only as long as we need it to run and protect the service. When signed-in accounts go live, a scan you run while signed in will be saved to your account until you delete it.

Where it is stored

The service runs on third-party hosting and, for accounts, a hosted database. These providers process data on our behalf so we can run the service. We do not sell your data, and we do not share it with anyone else except where the law requires it.

Your browser storage

The site keeps a small amount of state, such as your draft account details, in your browser's local storage so the app can work. This stays on your device. Clearing your browser storage removes it.

Your choices

Because the free scan does not require an account, you can use it without giving us a name or an email. Once accounts are live, this page will describe how to export or delete the data tied to your account. Until then, clearing your browser storage removes the account details this device holds.

Children

Plaintext is a tool for people building and running software, and it is not directed at children. Please do not use it if you are under the age at which you can agree to these terms where you live.

Changes and contact

If we change how we handle data, we will update the date below. A contact address for privacy questions is being set up and will be listed here before launch.

Last updated: 2 August 2026