Privacy
Privacy and data handling
These notes distinguish account authentication from public website scanning and explain the information each part of the service is designed to handle.
Account authentication
Your ProveFixed password is used only to authenticate your account and is processed by Supabase Auth. The ProveFixed application database and application logs do not store your password in plaintext.
Scanner inputs
The scanner accepts public domain names or URLs for external checks. Never enter a password, token, API key, private key, hosting credential, DNS credential, or customer administration credential into a scan form.
Authorized domain use
Submit only domains you own, administer, or have permission to review. The scanner performs public, non-invasive checks and does not require access to a website administration area.
Saved workspace data
When you sign in, authorized domain records, saved scan results, reports, and related workspace information may be stored so they remain available in your dashboard.
Pilot applications
A founding pilot application stores your account ID, organization reference when available, country, agency role or type, approximate managed website range, application status, and the timestamp and scope of your explicit contact consent. Pilot contact consent is limited to the application and its follow-up; it is not long-term marketing consent.
Scheduled scan metadata
For explicitly enabled DNS-verified domains, the service may store schedule frequency, status, UTC run times, safe failure codes, and links to saved scan and report records. Scheduled scans do not require or store website administration credentials.
Local scan history
Scan history is stored in your browser localStorage so you can revisit recent results on the same device. You can clear it from the scan page.
Hosting and logs
Normal hosting logs may include request metadata such as timestamps, routes, and network information. ProveFixed application logging does not include password, token, cookie, or private credential values.
Access and deletion requests
Reports and domains have dashboard deletion controls. Use the published support email for account and pilot-application access, privacy, or deletion requests. This notice does not claim that an unimplemented self-service account deletion flow exists.
Email us: DayDreamerDevelop@outlook.es