Legal
Privacy Policy
Last updated June 24, 2026
ShipSafe is built to be data-light on purpose. There are no accounts and no tracking beyond what is needed to run and protect the service.
What we collect
When you run a scan we receive the URL you submit and your IP address. The URL is used to perform the scan; your IP is used only for rate limiting and abuse prevention. We may keep minimal, aggregate request counts to operate the service. We do not require or collect names, emails, or payment details to run a scan.
Scan results
Scan results are generated on demand and returned to your browser. We do not build a profile of your app over time, and we do not sell or share your results. Any sensitive value a scan happens to surface (for example, a key found in public code) is redacted before it is shown and is not written to logs or persistent storage by us.
What we deliberately do not do
We do not access or store your source code. We do not log the full contents of your pages, your secrets, or the database rows a scan may read. We do not sell your data to anyone.
Service providers
ShipSafe is hosted on Vercel, which processes requests to operate the site. If bot protection is enabled, we use Cloudflare Turnstile to tell humans from bots. These providers handle data only to deliver the service and under their own terms.
Retention
Scan inputs and outputs are transient and tied to your request. Operational data such as short-lived rate-limit counters expires automatically.
Contact
Questions about privacy: director@limitlessfiji.org