Privacy

The free beta does not ask you to create an account and does not take payment cards. This is a plain description of what this program does. It is not a lawyer's document.

• WebCheck fetches one public page you name, plus robots.txt and sitemap.xml on that same site. The address is used for the check and is not written into the visit counts.
• A free result stays in your browser. It is not published, and there is no public list of checked sites.
• If you copy the result summary, the text does not include the address you checked.
• Uploaded images are processed in memory and are not saved as files or published. Camera metadata is not kept in the downloaded WebP. The free limit is 1.5 megabytes, JPEG, PNG or WebP.
• Mail auth looks up the public SPF and DMARC text for a domain you type. The domain is not saved.
• Schema check compares JSON you paste with a schema you paste. It does not fetch remote references and it does not save the text.
• Loudness accepts one WAV up to 16 megabytes and 90 seconds. The file stays in memory for the measurement and is not saved.
• Payment fields check the shape and checksum of a reference, IBAN, Finnish business ID or RF creditor reference. The numbers are not written to a log.
• Photo privacy says whether a JPEG or PNG has location, camera, date or colour-profile metadata. The answer does not include map coordinates. A stripped copy is made in memory and is not saved. SVG is not accepted.
• A redirect check follows one public address. The chain is shown to you and is not stored.
• Your network address is used only in memory, to slow repeated requests. It is not written into the visit counts.
• We count page visits, finished checks, image runs, and which channel brought you here (for example search, Reddit or HRP Sivut). A first-party cookie named mt_src stores only that channel name for 30 days. Another cookie, mt_seen, is only the digit 1 after your first page, so a later page can be counted as a return view. It is not an account and not an advertising id. There is no third-party ad tracker.
• The optional question after a check stores only the answer you click, not your name and not the address.
• A Pro text file can be created only in development, after a pretend payment. It is kept up to 24 hours behind a random address, marked so search engines should ignore it, and then deleted. Paid checkout is not open.
• We do not sell data and we do not run a mailing list.
• A local API simulation, if a developer turns it on, keeps a separate ledger of test keys and stored check results so a retry is not counted twice. That file is not the visit counter. Ordinary browser use does not write it. The public API is not open, and the ledger is not a customer account.

Questions: HRP Sivut contact page.