Privacy policy

> DRAFT — not reviewed by a lawyer. Placeholders in [brackets] must be filled in by the owner before publishing. Check the list of service providers against what is actually connected at launch.

Privacy Policy

Last updated: October 11, 2026

This policy explains what data OkayToShip ("we") collects at okaytoship.com, why, and what you can do about it. The Service is operated by [Owner legal name]. Contact: privacy@okaytoship.com.

What we collect

When you run a scan

• The address of the app you asked us to scan.
• What we find on that app's public pages: page content, JavaScript file names, response headers, DNS records, and our findings.
• A hashed (not readable) form of your IP address and the domain, to enforce free-scan limits and stop abuse.
• A CAPTCHA check by Cloudflare Turnstile.

If a scan finds a secret (an API key or token), we keep only its type and the first 6 characters. We never store the full value.

When you sign in

• Your email address.
• A one-time sign-in code, stored only as a salted hash and deleted or invalidated after use or expiry.
• A hashed form of your IP address, to rate-limit code requests.

When you buy something

• Payment is handled by Lemon Squeezy, our Merchant of Record. We do not receive or store your card details. We receive an order reference, product, amount, status, and the email used.

When you order a fix

• Access you grant us to your project or repository (by invitation only — we never accept passwords), messages about the order, and before/after scan results.

Usage analytics

• Events like "scan started" or "report purchased", collected with PostHog, to understand where people get stuck. We do not send your email, found secrets, or full URLs with query parameters to analytics.

Why we use it

• To run scans, show results and deliver what you paid for.
• To sign you in and keep your account secure.
• To enforce limits and prevent abuse of free scans.
• To send emails you'd expect: sign-in codes, "your report is ready", monitoring alerts.
• To improve checks and fix false positives.
• To publish anonymised, aggregated statistics. We never publish your app's name, URL or findings without permission.

We don't sell your data, and we don't use it for advertising.

Service providers

We use these providers to run the Service. They process data on our behalf:

| Provider | What for | |---|---| | Railway | Hosting the site, database and scanner | | Lemon Squeezy | Payments (Merchant of Record) | | Resend | Sending email | | Cloudflare Turnstile | CAPTCHA | | PostHog | Product analytics | | Groq, Cerebras | Writing plain-language explanations of findings. We send finding descriptions, not your email or full secrets | | Telegram | Monitoring alerts, if you turn them on |

[Add the region where each provider stores data, once confirmed.]

How long we keep it

• Sign-in codes: until used or expired.
• Scan results: for as long as your account exists, or [N days] for scans not linked to an account. [Owner to decide.]
• Purchase records: as long as required for accounting and tax by law.
• Fix access: removed when the work is done.

Your rights

You can ask us to show, correct, export or delete your personal data, or to stop processing it. Email privacy@okaytoship.com. Depending on where you live (for example, the EU, UK or California), you may have additional rights under local law, including the right to complain to a data protection authority.

Deleting your account deletes your projects' link to you. We may need to keep purchase records for tax and accounting.

Cookies

We use cookies that are needed for sign-in. Analytics cookies are used [only with your consent / as described in the cookie banner — owner to decide before launch].

Security

Sign-in codes and IP addresses are stored hashed. Found secrets are never stored in full. Keys we use are kept out of our code. If you think you've found a vulnerability in OkayToShip, see our Responsible Disclosure Policy.

Children

The Service is not intended for children under 16.

Changes

If we change this policy in a meaningful way, we'll update the date above and tell signed-in users by email.