What we collect, and why

Who is responsible

Leakproof is run by [legal company name], [registered address]. We are the “controller” of the personal data described here. Questions about privacy go to info@leakproof.agency.

When you run a scan

When you type a page address and start a scan, we collect:

• The address you typed, and what our scanner reads there: the public page, two screenshots (desktop and phone), load times, and the links on that page.
• Public DNS records for that domain (SPF, DKIM, DMARC and MX), to check whether its emails can reach the inbox.
• Your IP address and browser type, only to stop abuse: one scan at a time per connection, and a limit per hour and per day.

The scanner never logs in, never fills in or submits forms, and never clicks buttons. It reads the page the same way a visitor’s browser would. If someone scanned the same site in the last 24 hours, we show you that result again instead of scanning twice; we never show you the exact page address the other person typed.

When you leave your email

If you fill in the form after the scan, we also keep your name, your email address, the time you agreed to be emailed, and the scan it belongs to. We use them to keep your results for you at a private link, to email you about them (for example, a copy of that link), and to answer if you reply.

We don’t add you to a newsletter. The same form has a second, optional box: “You may contact me about working together”. It is unticked unless you tick it. Only if you tick it do we write to you about our paid work, and we keep the time you ticked it. You can withdraw it at any time by replying to any of our emails.

If you buy a Deep Dive, we also keep your company name (if you give it), the funnel address, the competitor addresses and ad text you give us (if any), your payment record (the payment provider’s reference, the amount and the time; we never see your card details) and, for the Deep Dive + Live Test, your permission for the live funnel test (its exact wording, the time and your IP address). We use them to do the work, deliver it, and keep the accounting records the law requires.

Competitor discovery. If you buy a Deep Dive and name fewer than 3 competitors, we send public facts about your funnel (its brand, offer, headline, the audience it speaks to and a short excerpt of its text), any country or language hints, and the competitor addresses you gave us to our AI provider, which searches the public web and suggests your closest competitors. We never send your name, email address or payment details for this. We keep the suggestions, the competitors we picked and why, and the addresses of the public web pages the search used, with your order.

Why we use it, and how long we keep it

Data	Why	Kept for
Live scan progress	To show the scan while it runs	About 15 minutes after the scan
Screenshots and scan results	To show your result page	30 days, then deleted. If you leave your email, they stay with your results (next row).
Name, email, consent record, and the scan they belong to	To keep your results and email you about them (consent)	Until you ask us to delete it, or 12 months without contact
“You may contact me about working together” (only if ticked) and when	To write to you about our paid work (consent)	Until you withdraw it, or with your results (row above)
IP address and browser type	To prevent abuse (legitimate interest)	24 hours on a scan; 30 days once you leave your email
Deep Dive order: contact, funnel address, payment record, test permission	To deliver what you bought (contract) and keep accounting records (legal duty)	[as long as your accounting law requires, e.g. N years]

Who we share it with

We never sell personal data. A few providers process it for us, under contract:

• Hosting: [hosting provider, country]
• Sending email: [email provider]
• Recording the video of the Deep Dive + Live Test: [video tool]
• Deep Dive payments: Stripe [and your crypto payment processor, if you offer crypto]
• The AI part of the Deep Dive review (your funnel’s public pages and the ad text you give us), its web reputation check and the web searches of its competitor discovery: Anthropic (United States)
• The optional robot check on our forms, if switched on: Cloudflare Turnstile

If any of them is outside your country, we use [standard contractual clauses or the safeguard that applies].

Cookies and storage

This site uses one security cookie that protects our forms, and remembers your light or dark theme in your own browser. There are no advertising or analytics cookies. [If you add analytics, name the tool and what it stores here.]

What you can ask us

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can also withdraw your consent at any time; that doesn’t affect what we did before. Write to info@leakproof.agency; we answer within 30 days. A deletion removes your request, your scan result and its screenshots.

If you think we handled your data wrongly, you can also complain to [your data protection authority].

If this policy changes

We update the date at the top of this page. If a change affects what we do with your email address, we tell you by email first.