Privacy Policy

Last updated: 15 August 2026

Information we collect

• Account information. If you register, we store your email address and a salted hash of your password. We do not store passwords in plain text.
• URL check data. For each check we store the requested URL, final URL, HTTP status code, response time, content type, response size, page title (when available), and the check timestamp, linked to your account when made via the API.
• Web check data. Checks made through the website are stored with a random browser identifier instead of an account, plus a truncated network identifier used for rate limiting.
• API usage data. We store API key names, creation dates, and last-used times to operate the service.
• Logs. Server logs record request times and status codes for security and troubleshooting. We do not log API keys or passwords.

How we use information

To operate the URL checking service, authenticate requests, maintain your check history, prevent abuse, and improve reliability. We do not sell your information.

Retention

Account data is kept until you ask us to delete it. Check records may be pruned periodically. Logs are rotated.

Security

Traffic is served over HTTPS. Passwords are hashed with scrypt. API keys are stored only as SHA-256 hashes and are shown once at creation.

Third parties

The service is hosted on a third-party server provider. Checks connect only to the URL you submit.

Contact

Privacy questions: support@bxss.site.