Privacy policy

Last updated: 6 November 2026 (accounts and badges added)

OpenPageScan is operated by Tetrachrome (the data controller). We designed it to collect as little as possible.

What data we process

One-off scans. When you scan a URL, the URL and your IP address reach our Cloudflare Worker so it can fetch the page on your behalf. We use your IP address only for short-lived rate limiting to prevent abuse (legal basis: legitimate interest). Scan results stay in your browser.

Accounts (optional). If you create an account to get badges, we store: the account name you choose, your passkey's public key (never a password or anything that could sign in as you), the domains you add, API key hashes, and the scan results and score history for your verified domains (legal basis: performing the service you asked for). We do not ask for your email address.

Badges. When a visitor's browser loads a badge, we receive the request (IP address, the page it's embedded on via Referer) and use it only to check the badge is shown on its own site and to decide whether a rescan is due. We do not log or profile badge viewers.

Cookies and tracking

One-off scans set no cookies. If you sign in, we set a single strictly necessary cookie (ops_session, HttpOnly, Secure, 30 days) to keep you signed in. This site loads no analytics, advertising pixels or other third-party scripts, and badges set no cookies on the sites that embed them.

Sharing and processors

Our only service provider (processor) is Cloudflare, Inc., which hosts the site and database and may keep standard request logs under its own policy. We do not sell or share personal information. International transfers to Cloudflare are covered by the EU-US Data Privacy Framework and standard contractual clauses.

Retention

Fetched pages are cached at the edge for up to 5 minutes. For verified domains we keep the 30 most recent full reports plus numeric score history until you remove the domain or your account. Sessions expire after 30 days. Removing a domain deletes its keys, reports and history immediately.

Public reports

Verifying a domain publishes its latest report and score history at /r/<domain>, which is what the badge links to.

Your rights

You have the right to access, rectification, erasure, objection and portability, and the right to complain to your data protection authority. Since we hold no data tied to you, there is usually nothing to retrieve, but you can contact us at any time.

Children

The service is not directed at children under 16.

Contact

Open an issue on GitHub.