Privacy Policy
Last updated: 28 October 2026
This policy explains what ZonScan does with information when you use it. It is written to describe this deployment as it actually works rather than a generic template: the search path is deliberately stateless, and the only lasting record we keep in your browser is the plan marker that lets the dashboard work.
1. Information we handle
1.1 Searches you run
A search takes the handle you type and asks public profile pages whether that handle is registered. The handle is held in memory for the length of the request so the results can be returned to your browser. It is not written to a database, and we do not keep a list of who searched for whom.
If you start a search from the pricing or retention pages, the handle may be carried in the URL so you can continue where you left off. That value lives in your browser history and in a short-lived entry in your browser session storage, not on our servers.
1.2 Account information
The core search does not require an account. If sign-in is enabled on this deployment, it works by email link: we would store the address you submit and a one-time token long enough to complete that sign-in, and nothing else. We do not ask for a name, password, phone number or date of birth.
1.3 Payment information
When a payment provider is connected, the checkout is hosted by that provider. Your card number is entered on their page and never reaches this application. We receive a confirmation that a plan was paid for, and we act on it by setting a plan cookie in your browser.
We do not store card numbers, CVC codes or full billing addresses. We may retain a provider reference so a purchase can be matched to a dispute.
1.4 Technical information
The web server necessarily processes the request address, a user agent string and the time of the request in order to respond and to keep the service running. Standard infrastructure logs may retain these for a short operational window for abuse prevention and capacity planning.
We do not currently load third-party analytics, advertising pixels or cross-site trackers on this site.
2. How we use information
Information is used to answer the search you asked for, to show the correct plan state in your dashboard, to process and support purchases, to keep the service available and secure, and to meet legal and accounting obligations where they apply.
We do not use search activity to build advertising profiles, and we do not sell, rent or trade personal information to anyone.
3. Storage and security
Search results are produced per request and are not stored on the server. Your plan state is stored in a first-party cookie in your browser, readable only by this site.
Traffic is served over HTTPS in production. Internally we keep the number of people with access to operational logs to the minimum needed to run the service, and we prefer designs that avoid collecting data in the first place over designs that protect data we did not need.
No system is perfectly secure. If a breach affected information we hold, we would notify affected users and the relevant authority as required by applicable law.
4. Service providers
We rely on a small number of providers: a hosting platform that runs the application, a payment processor that handles checkout when it is enabled, and the public websites that our scan visits. Each processes only what its role requires.
Those external platforms are not told who you are. A probe is an ordinary page request for a handle, indistinguishable from a visitor opening the same profile URL.
5. Cookies and local storage
We set one functional cookie — the plan marker — so the dashboard can show an active subscription. It contains the plan name only, carries no advertising identifier, and lasts up to twelve months or until you clear it.
Local and session storage are used for interface state: the pending-checkout marker that lets the site ask you once, after an interrupted purchase, whether you want to continue. Clearing your browser storage removes it and stops that prompt.
6. Retention
Search input is discarded when the request completes. Plan cookies persist until they expire or you delete them. Purchase records are kept as long as tax and accounting rules require, then deleted or anonymised.
Operational logs are kept for a short window and then rotated out.
7. Your rights
Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, to receive a portable copy, and to withdraw consent where processing rests on consent.
Because we deliberately collect very little, a request will often return nothing more than a purchase record tied to an email address. You can exercise any of these rights by contacting us through the support channel; we respond within the period the applicable law allows and will not charge for a reasonable request.
8. Children's privacy
The service is intended for adults. It is not directed at children, and we do not knowingly collect information from anyone under the age of majority in their jurisdiction.
If you believe a child has provided information to this service, contact us and we will delete it. Parents looking for guidance on a child’s online footprint should start with our dedicated guide, which is written to be used with the child rather than about them.
9. International transfers
This service is operated from a single hosting region, but the websites a search visits are located worldwide. Requesting a public profile is an ordinary outbound web request and does not transfer personal data about you to those sites.
Where a provider processes data in another country, we rely on the transfer mechanism that provider offers for that region.
10. Changes to this policy
When the way the service handles data changes, this page changes with it. Material changes will be reflected in the date at the top of the page, and where the change is significant we will surface a notice in the interface.
Continuing to use the service after an update means you accept the revised policy.
11. Contact
Questions about this policy, or a request about your own information, can be sent through the support channel listed on the checkout page. Include enough detail for us to identify the relevant purchase or request, but please do not send card details by email.