Fireshift / Help / Privacy and data
Privacy: what we keep and for how long
The instant scan on /scan/ runs in your browser and stores nothing unless you ask for the report by email. When you do, we keep the domain, your work email and the result for 12 months, then delete them. Our own website runs no analytics, advertising pixels or cookies. A scan reads a website's public tags and network requests; it is about a site, not about people, and we don't try to collect personal data through it. We never sell or rent data. The full policy is in our privacy policy.
What we keep
| Data | Why | Kept for |
|---|---|---|
| Instant scan in your browser | Nothing is stored unless you ask for the report by email | - |
| Domain, work email, scan result (emailed report) | To run the scan, send it, and follow up once | 12 months |
| Emails with you | To answer | 12 months after the last message, unless you're a customer |
| Payment and invoice records | Dutch tax law | 7 years |
| Do-not-contact list | So an opt-out sticks | Your email only, as long as we send outbound |
What a scan does and doesn't touch
- It reads the files and requests any visitor's browser sees: tag containers, network hits.
- It doesn't submit forms, create accounts or log in.
- Reports may show conversion labels and container IDs from your site. Reports we publish (like the sample) are anonymised; we name no site without its agreement.
- We may use anonymised, aggregated statistics, such as "7.3% of 206 SaaS sites count a login", without naming any site.
Who processes data for us
Microsoft 365 (email), GitHub (hosting), Stripe (payments), FormSubmit (a backup forwarder for the scan form), and the other services listed in the privacy policy, including the one the instant scan uses to fetch your homepage. Where data leaves the EEA, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
Your rights
Ask to see, correct, delete or export your data, or object to our use of it, at hello@fireshift.ai. We answer within one month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
FAQ
Do you put a pixel on my site?
No. Nothing is installed. Watch reads the same public files daily.
Can I ask you to delete my scan?
Yes. Email hello@fireshift.ai and we delete the request and the result.
Check your own site, free.
Fireshift reads what your site tells Google Ads, GA4 and Meta from the outside. No install, no account access.
Scan my site