Privacy

What we collect

When you check a website, we store the URL, the evidence we collected about it, and the resulting report. When you check an image, we store the image privately for the duration of the analysis, together with the derived evidence (metadata findings, provenance information, analysis results).

Uploaded images

• stored in a private bucket, never publicly accessible
• deleted automatically within 24 hours of the analysis
• never used to train AI models
• never included in shared reports — only the derived evidence is shown
• accessible only through short-lived signed URLs on the server

Anonymous use

You can use CanITrustThis without an account. Anonymous checks are associated with a salted hash of connection characteristics solely for rate limiting and to let you view and delete your own recent scans. We do not build profiles of anonymous users.

Accounts

If you sign in, we store your email address and link your scan history to your account so you can revisit and delete it. You can delete any scan at any time from your dashboard; deletion removes the scan, its evidence, its report and any stored files.

Third parties

Website analysis contacts public infrastructure (the site itself, RDAP registry endpoints, DNS resolvers). Text excerpts and analysis images may be processed by our AI provider to generate summaries and observations; they are not used for training. We do not sell data.

Contact

Questions or deletion requests: privacy@canitrustthis.app