Privacy Policy

Scan target: the URL or hostname you submit. This is required to perform the audit and is stored in our scan logs together with the result summary.

Technical data: IP address, user agent, browser language and request timestamps. These are generated automatically by our hosting provider and used for rate limiting, abuse prevention and debugging.

Scan results: the findings, evidence and score produced by the engine. Results are tied to the scanned host, not to your identity.

We do not require an account. We do not ask for your name, phone number, address or payment details.

To run the security audit you requested and to show or export the report.

To keep the service available and abuse-resistant: rate limiting, blocking automated floods, and investigating incidents.

To understand aggregate usage so we can improve the engine. Aggregate statistics never identify a single person.

Where the GDPR or a similar regime applies, we rely on legitimate interest (operating and securing a free public tool) for technical logs, and on your request (performance of the service) for the scan itself.

Scan logs and technical logs are kept for a limited period needed for operations, abuse investigation and aggregate reporting, and are then deleted or anonymised.

Reports you request are generated on demand. We do not build a permanent public archive of scan results.

We do not sell personal data and we do not share it for advertising.

We use infrastructure and analytics providers (hosting, content delivery, aggregate web analytics) that process technical data on our behalf under their own terms.

We may disclose data if required by applicable law or a valid legal request.

VulScan Pro sets a language preference cookie so the interface stays in the language you selected. It contains no tracking identifier.

Aggregate analytics may set its own cookies. We do not use them to build personal profiles or to target ads.

The installable app (PWA / Android) stores static assets locally so the interface loads faster and works offline.

Traffic is served over TLS. Access to operational logs is restricted to the maintainers who need it to run the service.

No system is perfectly secure; if you believe you have found a vulnerability in VulScan Pro itself, report it to us instead of exploiting it.

You may ask what technical data we hold about you, request its deletion, or object to processing. Because we do not require accounts, the only data that can be linked to you is technical log data such as an IP address.

To exercise these rights, contact us at privacy@vulscanpro.online and include enough detail for us to locate the relevant logs.

The service is intended for professional and general audiences and is not directed at children under 13.

If this policy changes materially, the updated version will be published on this page with a new date. Continued use after an update means you accept the revised policy.

Questions about this policy: privacy@vulscanpro.online — Rekso Software Engineering, Yogyakarta, Indonesia.