Trust

Privacy

What Torvane knows about you, why, and who else sees it. What we keep about the sites you scan is on Security and your data.

What we collect

  • Your account. Your email address, as confirmed by Google or GitHub when you sign up, and which of the two you used. We never receive your password for either. If you set a password here, we store it as a bcrypt hash.
  • Your sites and reports. The addresses of the sites you add, the AI coding tool you name, and the results of their scans.
  • Your authorization. When you confirm you may scan a site, we record that confirmation with its time, your IP address and your browser.
  • An activity log. Sign-ins, changes to your sites, verifications and scans, each with its time and IP address. You can see it under Activity.
  • What you send us. An Enterprise enquiry, a report of an unwanted scan, or an email, with the details you put in it and your IP address.

Cookies

One cookie keeps you signed in, and a short-lived one carries you through sign-in with Google or GitHub. A third holds only your time zone's name (such as Europe/Paris), so dates are shown in your time. There are no advertising or analytics cookies, and no third-party trackers on this site.

What we use it for

  • To run the service: sign you in, scan your sites and show you the results.
  • To email you about your account and, if you turn them on, alerts about your sites.
  • To prevent misuse: the authorization record and activity log let us answer a site owner who says they were scanned without permission.

We do not sell your data or use it for advertising.

Who else sees it

  • Google or GitHub, when you sign in with them.
  • The provider that delivers our emails, which receives your email address and the message.
  • The payment provider, if you buy a paid plan. Card details go to them and never reach us.
  • The companies that host our servers.

The services a scan contacts about your site are listed on Security and your data.

Your choices

You can remove a site, with its reports, from your account at any time. To get a copy of your data, or to have your account and everything in it deleted (except the activity log and the record of which sites were scanned and when, which we keep to answer a site owner who reports an unwanted scan), email info@torvane.app.