Your link. Your business.

Last updated October 27, 2026. There are no accounts, advertising scripts or third-party analytics in this application.

Submitted links

The exact submitted URL and up to 19 directly linked pages on the same hostname may be fetched. The destination sees these requests. Avoid private access links. We do not log in.

Temporary reports

The application uses a SHA-256 hash of the normalized URL as its cache key. Reports can contain the destination hostname, page titles, page paths and short evidence snippets. Raw fetched HTML and full query strings are not stored in reports, though visible page content could repeat them. Reports expire after 15 minutes and are deleted opportunistically on later scan requests. Expiry does not immediately overwrite physical storage. There are no public report permalinks; API responses are excluded from indexing.

Cookies and limits

A secure, HTTP-only session cookie protects the website form. The public API does not require a cookie. Shared limits allow 12 requests per client per ten minutes. Counters use hashed client addresses (IPv6 /64 groups) and target hostnames, expire after ten minutes, and are removed on later requests.

Infrastructure

Cloudflare proxies this site, and the hosting web server keeps ordinary request logs. Those providers may process network identifiers and request metadata. URLs supplied in API GET queries can appear in those logs; use the form or API POST to avoid putting the submitted URL in our request path. We do not add submitted links to server error messages or analytics.

Control

You can clear the site cookie in your browser. No browser-local scan history is saved. Temporary report storage is outside the public document root.

Your selected language is saved in browser local storage. Browser language detection runs on your device.