Privacy
The short version: there are no accounts and no ads. You can scan a site without telling us anything about yourself, and analytics runs only if you say yes. Last updated 25 September 2026.
| Accounts | None |
|---|---|
| Advertising | None |
| Analytics | Only if you say yes |
| Scan results | Kept in memory for 24 hours |
| Your IP address | In memory for the scan limits, up to 24 hours |
| Remembered scans | Only in your browser, and only if you ask |
| Monitoring emails | Sent through Buttondown, only if you sign up |
DeployRadar is run by Saif ur Rahman, Delhi, India, the controller of the data described on this page.
When you scan a site
- We send the requests listed on /bot to the site you entered, and keep the result in our server’s memory for 24 hours, so that opening the same report again does not send that site more requests. The result is about the site, not about you.
- To enforce scan limits, we keep your IP address in memory for as long as the limit window it counts against, up to 24 hours. It is not written to any log, and every deploy clears it.
- Our access log records visits from crawlers, by the name they send, and never visits from people. It holds no IP addresses.
- The site runs on Fly.io in Amsterdam, which carries every request to and from our server.
Analytics, only if you say yes
If you switch analytics on in the notice, we load Google Analytics, which sets the cookies _ga and _ga_* with a random identifier so visits can be counted. Until you say yes, nothing is loaded from Google and no cookie is written.
- The domains you scan never reach Google. Every page address we report has its query string removed, and a report’s title is replaced with a fixed one, because both would otherwise name the site you looked at.
- Advertising features stay off. We do not run ads, and we tell Google not to act as though we might.
- You can change your mind at any time with Cookie and storage settings at the foot of every page. Switching analytics off deletes its cookies.
What stays in your browser
- Your answer to the notice, in local storage, so you are not asked on every page. It identifies nothing.
- If you press Remember this result in this browser on a report, that site’s result is stored in your browser so the next scan can show what changed. It stays there until you press Forget this site or clear your browser’s data, and it is never sent to us.
If you ask us to watch a site
Your email address and the domain you want watched go to our email provider, Buttondown, which sends the confirmation and any alerts. Nothing happens until you confirm by email, and every message has an unsubscribe link. We keep no copy of your address ourselves.
To compare each weekly check with the last, we keep a small snapshot of the watched site’s results, not of you, in a private repository, for as long as monitoring is active. The check itself identifies as DeployRadarMonitor, and one robots.txt line stops it.
If you email us
We use what you send only to reply to you.
What we don’t do
We do not sell data, run ads, build profiles of visitors, or fingerprint browsers. There is no account to create, so there is no account data to lose.
Asking about your data
To ask what we hold about you, or to have it corrected or deleted, email hello@deployradar.dev. For a security issue, write to security@deployradar.dev.