ZAI Manifest LLC is the controller of the personal data described here. Contact: [email protected].
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account: email, name, password (stored only as an Argon2 hash), plan, sign-up date | Provide the service; sign-in | Contract |
| Targets you test, results, reports, saved site credentials (encrypted) | Provide the service | Contract |
| Authorization requests, grants, and the security audit trail (account, IP address, target, decision) | Prevent unauthorized testing; answer site owners; investigate abuse | Legitimate interests; legal obligations |
| Public registration and DNS records of a domain you ask to test | Decide authorization requests | Legitimate interests |
| Email delivery log (recipient, type, outcome — never the message) | Make sure account email arrives | Legitimate interests |
| Page visits (IP address, page, browser) | Security and abuse prevention | Legitimate interests |
| Billing records (plan, amounts, Stripe ids) | Payments and tax records | Contract; legal obligation |
We do not sell personal data or use it for advertising.
A sign-in token is kept in your browser's local storage. One strictly necessary cookie, pp_anon, lets a browser read the results of a check it started before signing in. We use no advertising or analytics cookies.
You may ask for a copy of your data, its correction or deletion, a portable export, or restriction of or objection to its processing, and you may complain to your data-protection authority. Signed in, Account lets you download your data and delete your account yourself; for anything else email [email protected] from your account's address.
Passwords are hashed, saved site credentials are encrypted, connections use TLS, and administrative access is restricted and recorded. See Security & abuse to report a vulnerability.