Privacy

SecurityTxt generates and checks a security.txt file in the browser's request. There are no accounts.

Pasted files

Text you paste or type is not stored and not written to logs. A log line may include the request size, the verdict and the finding codes. It does not include the file, the field values, or your address.

Reminder list

If you ask to be reminded, we store the time, the email address, the word "validate", a consent version, and which expiry problem prompted it. We do not store your IP address, browser, the file, or the domain. The address is unconfirmed: no message is sent. Rows stay until you ask us to delete them or we drop the list. To be removed, write to mailto:security@pennscan.com.

Analytics

If Plausible is turned on, it does not use cookies and does not build an advertising profile. Page views are recorded without the query string, so values from a prefilled generator link are not sent.

If a Google Analytics measurement id is configured, each page also loads gtag.js for that id, with IP anonymization.