Privacy

What a submission stores today

Submitting a URL creates a durable record. This is the complete list of what is written when you submit:

• The address you submitted and its normalised, canonical form.
• The public IP addresses the host resolved to during the safety check, and each redirect hop.
• A salted hash of your IP address, used for rate limiting. The raw address is not stored.
• Your browser user agent string.
• The public pages Bobby selected for the scan, with the reason each was chosen.
• The lifecycle state of the submission and an audit trail of every state change.

What is not collected

Page text and screenshots are only read once discovery provider credentials are connected. Until then no page content and no captures are collected at all.

No advertising or analytics identifiers are collected, and no third-party trackers run on these pages.

Your status link

The link shown after you submit contains a secret token. That token is the only way to read the submission, and it grants no access to any other submission or to the platform.

Anyone who has the link can read that submission's status, so treat it as private. The reference alone is not enough.

Scan evidence and screenshots

When page reading and screenshots become operational, captures and extracted facts are stored privately by default with a source URL, a timestamp and a confidence state, for audit. They are never shown on a public page and are not published anywhere.

Discovered contact details

Business contact details discovered on a public page may be used for one reviewed transactional admission invitation, and for nothing else. There are no marketing lists and no bulk invitations.

Basis and retention

Submission records are kept for the legitimate interest of operating a governed admission process and maintaining an auditable decision history. Rate-limit hashes are short-lived operational data.

A submission and its evidence are removed on a withdrawal request from a contact address on the website, or from the operator's records on request. Withdrawal is recorded as a lifecycle state.

Your rights

You can ask what is held about a website you operate, ask for it to be corrected, or ask for the submission to be withdrawn and deleted. Requests are handled by the operator contact below while a dedicated privacy address is being published.

Safety when we inspect a website

Inspection is restricted to publicly reachable pages. Loopback, private-network, link-local, reserved and cloud-metadata addresses are refused, resolved addresses are re-checked on every redirect hop, and authentication is never bypassed.