Privacy Policy

1. Information We Collect

We may collect the following types of information:

• Information you provide: Files you upload, URLs or domains you enter when using our services (such as virus scanning, web scanning).
• Automatically collected information: Including IP address, browser type, device information, access times, and referring pages.
• Cookies and similar technologies: We use cookies to improve user experience and analyze website traffic.

2. How We Use Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our services
• To develop new features and services
• To analyze and monitor usage trends
• To protect the security of our services and users

3. Information Sharing

We do not sell your personal information. We only share information in the following circumstances:

• With your explicit consent
• With trusted third parties who provide services to us (bound by confidentiality agreements)
• To comply with legal obligations or protect our rights

4. Data Security

We take reasonable security measures to protect your information, but please note that no method of internet transmission or electronic storage is 100% secure.

5. Your Rights

Depending on applicable law, you may have the following rights:

• Access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict our processing of your information
• Data portability

5.1 DNS Lookup Tool — Specific Data Handling

The DNS Lookup tool (/dns-lookup/) works as follows and collects only what is necessary to operate the service:

• Server-side resolution only: DNS queries are performed by our server using Node's dns.promises API. We do not use your browser or your network to perform lookups — your IP address does not initiate or proxy the query. The results you see are identical to what any other user in the world would see for the same domain.
• What we store from your request: Only the domain string you submitted (e.g. scyscan.com) is used. The request is associated with your client IP solely for the purpose of rate limiting (max 5 requests per 10-second window per IP, in-memory Redis with rolling TTL).
• Caching: Successful query results are cached in Redis for 300 seconds (5 minutes), keyed by domain only (no IP, no session, no user identifier). Cache is shared across all users — one user benefits another. Cached responses contain the same DNS records you would receive on a fresh query.
• What we do NOT do: We do not log individual queries to disk in production (logger.log is a no-op in production builds). We do not build a per-user history of domains you have looked up. We do not associate your IP with the domain you queried beyond the rolling 10-second rate-limit window.
• Third-party DNS resolvers: The recursive DNS queries we issue go through the standard DNS hierarchy (root, TLD, authoritative nameservers). We do not forward your request to a third-party DNS-over-HTTPS service such as Google or Cloudflare — your query leaves our server as a normal UDP/TCP DNS packet, not as an HTTP request carrying your IP to a third party.
• Failed lookups (NXDOMAIN, ENOTFOUND): Returned to you as an empty result (status: "fail") without distinguishing "domain does not exist" from "transient error". No retry is performed.

If you have questions about DNS Lookup data handling, please contact us directly. The same access / correction / deletion rights in section 5 apply to any IP-based rate-limit record associated with you.

6. Children's Privacy

Our services are not directed at children under 13, and we do not knowingly collect personal information from children.

7. Changes to Privacy Policy

We may update this policy from time to time. Changes will be effective upon posting the revised policy on this page.