Privacy Policy

• We only collect what we need to run a scan: the URL you ask us to scan.
• We measure site usage with Umami (cookieless, self-hosted) and Google Analytics 4. No ad networks, no selling of data.
• Your API key (if you create one) is stored locally in your browser via chrome.storage.local and sent only to aiscan.site.
• Sign-in is optional. Anonymous scans work and are not tied to an account.

When you click the AIScan toolbar icon on a webpage, the extension sends the URL of the active tab to the AIScan API at https://aiscan.site/api/public/scan. That URL is what we scan. We do not read the page contents, your cookies, your browsing history, your form inputs, or any data from other tabs.

The extension requests the activeTab permission so it can read the URL of the tab you explicitly invoked it on, and the storage permission so it can remember your settings (including your optional API key) across sessions. Both are stored locally in your browser via chrome.storage.local.

• Scan results. For every scan we run, we store the URL, score, grade, and the individual check results. These power the public "Recent scans" feed and your personal scan history if you're signed in.
• Account data (only if you sign in). Email address and the authentication tokens issued by our auth provider. We use this to associate scans with your account and to gate per-account features (e.g. API keys).
• API keys. If you generate an API key, we store a hash plus metadata (label, created date, last-used timestamp). We never store the full key after first display.
• Operational logs. Standard request logs (IP address, timestamp, status code) for rate-limiting and abuse prevention. Retained for 30 days.

We use two analytics tools on aiscan.site to understand which pages and features are used. The Chrome extension sends no analytics.

• Umami, a cookieless analytics tool we run ourselves (agent-analytics.asif.dev). It records page views and product events such as "scan completed".
• Google Analytics 4 (measurement ID G-0HKX25F0V9), provided by Google. It sets first-party cookies (_ga, _ga_*) to count visits, and receives the page address and title, the referring site, your browser and device type, an approximate location derived from your IP address, and product events: scans started, completed or failed (with the scanned URL, score and grade), share and copy actions, sign-ups and sign-ins (with the method only), and checkout starts (with the plan only).

We strip sign-in tokens, the URL fragment and query parameters that can carry personal data (such as email, code or token) before anything reaches Google Analytics. We never send your email address, name or account ID. Google Analytics data is not used for advertising. You can opt out with the Google Analytics opt-out browser add-on.

• We don't sell, rent, or share your data with third parties for marketing.
• We don't run third-party advertising scripts, and we don't use analytics data for advertising.
• The Chrome extension does not inject content scripts into pages and does not read page contents.
• We don't use the URL you scan for anything other than running the scan and showing it back to you (and, where applicable, listing it on the public scans feed).

By default, scans are publicly listed at aiscan.site/scans. The URL, score, and check results are visible to anyone with the link. If you do not want a URL to be publicly listed, do not scan it.

Scan results are retained indefinitely unless you ask for deletion. Account data is retained while your account is active. To delete your account, your scan history, or specific scans, email asif2bd@gmail.com from your account's email address.

AIScan is hosted on Lovable Cloud (which uses Cloudflare for edge compute and Supabase for database and authentication). Google processes website analytics through Google Analytics 4. These providers process data strictly to deliver and measure the service.

AIScan is not directed at children under 13 and we do not knowingly collect data from children.

We'll update the "Last updated" date at the top of this page when this policy changes. Material changes will also be announced in the changelog.

Privacy questions, deletion requests, or anything else: asif2bd@gmail.com.