Privacy Policy
Last updated: July 9, 2025
Introduction
Welcome to SecureCheck ("we", "us", "our"), a service provided by Alpha System. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.
Information We Collect
When you use our service, we may collect the following information:
- Submitted URLs: The URLs you submit for analysis are the primary data we process. Please note that website owners can request to have their domains blacklisted from our scanning service by contacting us via email.
- Scan Data: The resulting security report data generated from the analysis of the submitted URL.
- IP Addresses: We collect your IP address to protect our service from abuse (like denial-of-service attacks or excessive requests). For your privacy, we do not store your IP address in plaintext. We store a cryptographically hashed version using a secret salt, which cannot be reversed to reveal your original IP address.
- Usage Data: We log the timestamps of scans associated with your hashed IP to enforce rate limits and for aggregated statistical analysis. This includes the number of scans performed in a given period.
How We Use Your Information
- To Provide Our Service: We use the submitted URL to perform the security scan. This involves our servers making requests to the URL to analyze its headers, content, and configuration. For the "URL Security" check, the submitted URL and its resolved IP address are checked against third-party threat intelligence feeds.
- To Improve Performance: We cache scan results for a short period (typically one hour) to provide faster results and reduce server load for frequently scanned URLs.
- To Protect Our Service: Hashed IPs and usage data are used to identify and block malicious activity, enforce rate limits, and ensure the stability and security of our platform.
- To Provide Real-Time Updates: We use a long-lived HTTP connection (Server-Sent Events) to push the status of your scan to your browser in real-time. This connection is closed as soon as the scan is complete.
Data Storage and Security
We take data security seriously. All application data is stored in a secure PocketBase database. Scan results are cached temporarily, and old job data is automatically purged to minimize data retention. Hashed IPs are stored for security and rate-limiting purposes.
Cookies
SecureCheck does not use cookies to track visitors on our own website. Our service's purpose is to analyze the cookies of the websites you ask us to scan; this information is part of the security report and is not used by us to track you in any way.
Third-Party Sharing
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. For the "URL Security" feature, we query third-party blacklist services (such as URLhaus, OpenPhish, and various DNSBLs) with the URL you provide and its corresponding IP address to check for known threats.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, please contact the developer, Alpha System.