Privacy Policy

The Service at privacyfixed.com is operated by Maroof LLC, a limited liability company organized in Virginia, United States (“PrivacyFixed”, “we”, “us”, or “our”). We are the controller of the personal data described below. For any privacy request or question, contact privacy@privacyfixed.com.

We practice data minimization. When you submit a scan, we collect and store only:

• the web address (URL) you choose to scan, which you represent you are authorized to submit;
• scan metadata and results — the time and duration of the scan and the observed outside companies, cookies, tracking parameters, and risk summary for that page; and
• operational logs generated automatically to run, secure, and debug the Service (e.g. request timing and error diagnostics), retained transiently.

Account information (optional). Using the Service does not require an account. If you choose to create one, we additionally collect and store:

• your email address, used to identify your account, verify it, and send account-related messages (such as password resets); and
• a secure one-way hash of your password — we never store your actual password, and we cannot recover or read it.

We only store the scans of paid subscribers. If you are on a paid plan, the scans you run while signed in are saved and associated with your account so you can review your history across devices. If you are signed out, or signed in on a free account, your scan runs and its result is shown to you, but no record of it is stored and it is not linked to any account.

The Service is engineered so that the following are never recorded or stored:

• your browsing history or any page you did not expressly submit;
• the contents or values of network requests, cookies, or tracking parameters — we record only that an item exists and its category, never its value;
• request bodies, response bodies, or scan-linked IP addresses; and
• your actual password (only a one-way hash is stored); your name; and your card number or other payment details, which go directly to our payment processor and never reach our servers.

These constraints are enforced at the data-model level — fields for such values do not exist in our database.

We use the information above solely to:

• perform the scan you requested and return its result;
• maintain your scan history so you can review past scans — paid plans only; free and signed-out scans are not stored;
• take payment and manage your subscription, if you buy a paid plan;
• operate, secure, monitor, and improve the Service; and
• comply with legal obligations and enforce our Terms.

We do not sell, rent, or share your scan data with advertisers or data brokers, and we do not use it for advertising or profiling.

Payments.If you subscribe to a paid plan, payment is processed by a third-party payment processor. You enter your card details on the processor’s own hosted pages — we never receive or store your card number. We store only an account identifier issued by the processor and your subscription status, so we know which plan you are on. The processor handles your payment data as an independent controller under its own privacy policy.

Where the GDPR or UK GDPR applies, we rely on:

• Consent (Art. 6(1)(a)) — you confirm before each scan; you may withdraw at any time as described below;
• Legitimate interests (Art. 6(1)(f)) — operating, securing, and improving the Service, balanced against your rights; and
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information to comply with law.

Scans are automatically deleted 90 days after they run. You may delete any scan from your history at any time. Operational logs are kept only as long as needed for security and diagnostics.

If you have an account, we keep your account information for as long as your account is active. When you delete your account (from Account Settings), your account and its associated scan history are deleted, and residual copies are removed within a commercially reasonable period except where we must retain limited information to comply with law.

We host the application and a secure database with reputable infrastructure providers located in the United States, who process data on our behalf under appropriate contractual safeguards. If you access the Service from outside the United States, you understand your information will be processed there; where required, transfers are made under recognized safeguards such as the EU Standard Contractual Clauses.

Depending on your location, you may have the right to access, correct, export, delete, or restrict the processing of your data, to object to processing, and to withdraw consent. You can delete an individual scan directly from your history, and if you have an account you can delete the entire account and its data from Account Settings at any time. For other requests, email privacy@privacyfixed.com and we will respond within the period required by applicable law (generally 30 days). EU/UK residents may lodge a complaint with their local supervisory authority. California residents have the rights described under the CCPA/CPRA, including the right not to be discriminated against for exercising them; we do not “sell” or “share” personal information as those terms are defined — see our Do Not Sell or Share My Personal Information notice.

We use industry-standard measures (encryption in transit, access controls, and data minimization) to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You use the Service at your own risk to the extent permitted by law.

The Service analyzes third-party websites you submit and may reference them. We are not responsible for the content, privacy practices, or conduct of any third-party site, and our observations about a site are informational only and not an accusation or legal conclusion.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

The PrivacyFixed browser extension is a separate, optional product you install from the Chrome Web Store or Firefox Add-ons. As a privacy tool, we built it to hold no data at all.

• It runs entirely on your device— it blocks known tracking companies, strips tracking parameters (such as “fbclid” and “utm_” tags) from links, and auto-rejects cookie banners, all locally in your browser.
• It collects no personal data and makes no network requests to us or anyone else — it sends us nothing. Its tracker blocklist is bundled with the extension and changes only when you update it.
• Your extension settings (which protections are on, and any sites you pause) are stored locally in your browser and are never transmitted.
• The only outbound action is the “Run a full scan” button: when you click it, it opens privacyfixed.com in a new tab to scan the address you chose — an ordinary link you initiate.

Because the extension neither collects nor transmits any information, the collection, use, and retention practices described above do not apply to it.

We may update this policy from time to time; the “Last updated” date above reflects the latest version, and material changes will be indicated on this page. Your continued use of the Service after changes take effect constitutes acceptance. See also our Terms of Service and Cookie Notice.