Privacy policy
untick is an independent software product operated by Mahmoud Shayeb, an individual developer (not a registered company). In this policy “we” means the person operating untick. For anything privacy-related, write to hello@untick.io.
We build a tool that catches dark patterns, so we hold ourselves to the same standard: this site uses no analytics or advertising trackers and sets only one strictly necessary cookie when you sign in.
What we collect and why
- Account data — name, email, password (stored only as a salted scrypt hash) and timezone. Needed to provide your account (contract).
- Scan data — the addresses you ask us to scan, the results and screenshots of those public pages. Needed to provide the service (contract).
- Free scans without an account — the address scanned and a one-way hash of your IP address, used only to enforce fair-use limits (legitimate interest). Unclaimed free scans are deleted after 30 days.
- Billing — handled entirely by Paddle.com, our Merchant of Record. We only store your Paddle customer and subscription IDs and your plan. We never see or store card details.
- Emails — password resets and monitoring alerts are sent through Mailjet. You can turn alerts off in Settings.
What we don’t do
We don’t sell or rent data, run ads, use trackers, or install anything on the sites we scan. Scans only load pages that are already public.
Cookies
untick_session — keeps you signed in. Strictly necessary, HTTP-only, secure, expires after 30 days of inactivity. Paddle’s checkout sets its own cookies only when you open checkout.
Who processes data for us
- Paddle — payments, invoicing and tax (Merchant of Record).
- Mailjet — transactional email delivery.
- Our hosting provider and Cloudflare — servers, network and DDoS protection.
How long we keep it
Scan history is kept for the period your plan includes. Deleting your account (Settings → Delete account) immediately deletes your sites, scans, screenshots and sessions and cancels your subscription.
Your rights
You can access, correct, export or delete your data, object to processing, or complain to your local data protection authority. Email hello@untick.io and we’ll respond within 30 days.