What we keep, which is very little.

There is no sign up, so there is nothing to sign up with. There is no database. There is no analytics script on any page of this site, no advertising tag, and no cookie of any kind.

The list below is not a summary of what we keep. It is all of it.

When a site is scanned, the result is written to a file on our server so that reloading a report does not re-run the scan and quietly change a report someone already sent to a client. The file is named after a scrambled version of the hostname, not the hostname itself, and it holds colors, contrast numbers and the parts of the page they came from.

It is deleted seven days after the scan. Scanning again writes a fresh one.

A Studio pack is one small file holding the code itself and the list of sites redeemed against it. There is no name and no email address in it. The code in the address bar is the whole of the account, which is why the page tells you to bookmark it.

The scan endpoint counts recent requests per address so that one visitor cannot loop it and take the queue. That count is held in the server's memory, is never written to disk, and disappears when the server restarts.

Payment is handled entirely by Stripe on Stripe's own pages. Your card number never touches this site and we never see it.

Stripe asks for your email address so it can send you a receipt, and Stripe keeps that under its own privacy policy at stripe.com/privacy. What comes back to us is the answer to one question, whether the payment succeeded, along with the site name the payment was for.

The one thing this site stores in your browser is which theme you chose, light or dark, so the page does not flash the wrong one on your next visit. It is kept in your browser's own storage, it never leaves your machine, and it is not a cookie, so it is never sent to us.

We request the page you named the same way any visitor's browser would, and our requests appear in that site's logs as ordinary traffic. We do not store a copy of the page, only the measurements taken from it.

Write to hello@contrastproof.com. A cached scan or a pack file is deleted the day the mail is read.

For anything Stripe holds, including your receipt, the request goes to Stripe, and we will point you at the right place if that is easier.