Privacy

Limited technical observations.

Simrix Scan is designed to minimize the information collected during approved, read-only checks.

Information that may be processed

Public URLs may be requested.
Public response metadata may be observed.
Public HTML may be analyzed in memory.
Full response bodies are not retained by default.
Bounded evidence excerpts and body hashes may be retained.
Request timestamps and technical outcomes may be retained.
Suppression and opt-out records may be retained to honor requests.

Pilot evidence remains local and controlled until later infrastructure is approved. Simrix Scan does not currently provide public report hosting.

Information not collected by the scanner

No login, form, cart, checkout, or payment data is collected. No credentials are tested.

Retention

Unqualified scan evidence: Retained for no more than 30 days.
Qualified evidence: Retained for no more than 60 days unless required for an active conversation or legal/compliance purpose.
Opt-out and suppression records: Retained as needed to honor the request.