Privacy Policy
Last Updated: January 2, 2026
This Privacy Policy describes how React2Shell Scanner ("we," "us," or "our") collects, uses, and protects information when you use our vulnerability scanning service.
Information We Collect
Information You Provide
- URLs Submitted for Scanning: The website addresses you submit for vulnerability assessment.
- Authorization Confirmation: Your acknowledgment that you have permission to scan the submitted URL.
Automatically Collected Information
- Scan Results: Technical data about vulnerability status of scanned URLs.
- Scan History: Records of your previous scans (stored locally in your browser or associated with your session).
- Usage Data: IP address, browser type, device information, and timestamp of requests.
- Log Data: Server logs for security monitoring and service improvement.
How We Use Your Information
We use collected information to:
- Perform vulnerability scans on URLs you submit
- Display scan history for your reference
- Maintain and improve service performance
- Detect and prevent abuse or unauthorized use
- Comply with legal obligations
Data Retention
- Scan History: Retained for 30 days, then automatically deleted.
- Server Logs: Retained for 90 days for security and debugging purposes.
- Aggregated Analytics: May be retained indefinitely in non-identifiable form.
Data Sharing
We do not sell your data. We may share information only:
- With service providers who assist in operating our service (hosting, analytics)
- When required by law or valid legal process
- To protect our rights, safety, or property
Security
We implement industry-standard security measures including encryption in transit (TLS), secure infrastructure, and access controls. However, no system is 100% secure.
Your Rights
Depending on your jurisdiction, you may have rights to:
- Access the personal data we hold about you
- Request deletion of your data
- Opt out of certain data processing
To exercise these rights, contact us via the support channel on our website.
Third-Party Links
Our service references external resources (e.g., CVE databases). We are not responsible for the privacy practices of third-party sites.
Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated revision date.
Contact Us
For questions about this Privacy Policy, contact us via the support channel on our website.