Privacy Policy

This Privacy Policy describes how LinkThreatScan (“we”, “us”, or “our”) collects, processes, and safeguards your personal information when you access or use our website and services. By using LinkThreatScan, you acknowledge that you have read and understood this policy. We encourage you to review it periodically, as it may be updated to reflect changes in our practices or applicable law.

1. Information We Collect

We collect information in several ways depending on how you interact with our service:

• Account information — Sign-in is provided by EmbedAuth, which holds your credentials. We receive your email address, your name if you give one, and an account identifier. We never receive your password.
• Scan data — The URLs you submit and their results. Each report is reachable by anyone with its link. For scans made without an account, we also store the IP address the request came from, to enforce the daily free limit.
• Technical data — Your IP address, browser type, operating system, device identifiers, pages visited, and timestamps of activity.
• Payment data — Subscription and billing information processed by our payment provider, Stripe. We do not store full payment card details on our servers.

2. How We Use Your Information

We use the information we collect solely for legitimate purposes necessary to provide and improve the LinkThreatScan service:

• To create and maintain your account and provide access to our scanning tools.
• To process subscription payments and manage your billing relationship.
• To deliver scan results, reports, and service-related communications.
• To monitor for and prevent abuse, fraud, and unauthorised access to our platform.
• To improve the accuracy and performance of our security detection algorithms.
• To comply with applicable legal obligations and respond to lawful requests from authorities.

3. Data Sharing

We do not sell, rent, or trade your personal data. We only share information with third parties in the following limited circumstances:

• Service providers — Vendors who help us operate the service: EmbedAuth (sign-in), Stripe and paybroadcast (payments), Cloudflare and our hosting provider (infrastructure), and Google AdSense (advertising, subject to your cookie choices).
• Threat-intelligence services — To check a scanned site we send its host name or IP address to Google Safe Browsing, AbuseIPDB, StopForumSpam and Artists Against 419, and the scanned URL to urlDNA. These requests contain the scan target, never your account details.
• Legal requirements — When required to do so by law, court order, or governmental authority, or when disclosure is necessary to protect the rights, property, or safety of LinkThreatScan, its users, or the public.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices available to you.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, to maintain your account, and to comply with our legal, regulatory, accounting, or reporting obligations. Scan results, including the IP address recorded for scans made without an account, are kept so that shared report links keep working and your history stays available. You can delete your account yourself at any time, on the My account page: your scans, API keys, the organizations you founded and your sign-in at EmbedAuth are deleted with it, at once. You may also ask us to delete specific scans by contacting us (see Section 8).

5. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate or incomplete data.
• Erasure — Delete your account yourself on the My account page, or request deletion of your personal data, subject to legal retention obligations.
• Portability — Request that your data be provided in a structured, machine-readable format.
• Objection — Object to the processing of your data in certain circumstances permitted by law.

To exercise any of these rights, please contact us at the address listed in Section 8. We will respond within the timeframe required by applicable law.

6. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted connections (TLS/HTTPS), hashed password storage, and access controls restricted to authorised personnel. While we strive to protect your information, no method of transmission over the internet is completely secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect any unauthorised use of your account.

7. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will revise the “Last updated” date at the bottom of this page and, where appropriate, notify you by email or through a prominent notice on our website. Your continued use of LinkThreatScan following the posting of changes constitutes your acceptance of the updated policy.

8. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at [email protected]. We are committed to resolving any concerns promptly and transparently.

Last updated: September 29, 2026