Privacy notice

Who we are

isyoursitesafe.com is run by Utlyze's security practice. The legal entity name and postal address are added here before launch. Privacy questions: hello@utlyze.com.

What we collect

• The website address you ask us to check, and the results of checking it.
• The email address you give us for the report. Giving it is your consent to receive that report and notices about your own domain.
• Whether you ticked the separate marketing box. It starts unticked, and leaving it unticked means no marketing email.
• A one-way hash of your connection's IP address, used only to limit how many checks one connection can request. We do not store the raw IP address with your request.
• For purchases, what Stripe tells us about the order. Card details go to Stripe; we never see them.

Why we use it

• To run the checks you asked for and send you the report.
• To send notices about your own domain, such as a retest reminder.
• To send product news, only if you ticked the marketing box.
• To stop abuse of the free check.

What we never do

• We never sell or share your personal information, and we never build marketing lists from scan results or harvested addresses.
• We never use a check of your domain to cold-pitch you or anyone else.
• Breach-exposure lookups for a domain run only after the domain owner proves control, and their source is credited and linked, never resold.
• Content we read from a website is treated as data, never as instructions to us or our tools.

Who processes data for us

Stripe (payments), our hosting provider (Vercel) and our database and email providers, which are named here before launch.

How long we keep it

Retention periods for requests, reports and evidence are set before launch and published here. You can ask us to delete your data at any time by writing to hello@utlyze.com.

Your choices

Unsubscribe from marketing in any marketing email or by writing to us. Ask for a copy of what we hold about you, or for its deletion, at hello@utlyze.com.