Template for the site owner to review with a lawyer before launch. It is not legal advice and the postal address and contact email are placeholders.

Privacy

Last updated November 4, 2026.

ShipCheck stores the email you use to sign in, the app URLs you add, checkup scores, issue categories, and a short fingerprint of a leaked key (a prefix and suffix, not the full secret). It does not store database rows it reads during a table check. Those responses are discarded after the status is known.

Magic-link tokens and session cookies are stored as hashes. Stripe stores your payment details. We keep the Stripe customer id and subscription status so the dashboard can show credits. Email is sent with Resend when that account is configured. In demo mode, messages are kept in a local log instead.

Preview scans are tied to the result link. Full checkups are tied to your account. Public score cards and badges show the grade, host, and categories only.

You can stop monitoring an app from the dashboard. Deleting the whole account is not self-serve in this MVP. Email the address you use for ShipCheck support once you publish one, and the operator can remove the row.

Account email covers welcome, an unused free credit, an issue open more than 7 days, a low balance, and a note after 30 days idle. Every one of those has an unsubscribe link. We do not send them if you opt out. A preview is emailed only when you check the consent box. We use a sign-in cookie and, if you open a referral link, a 30-day referral cookie. We do not use advertising cookies.