Privacy Policy

CheckYourWeb is committed to your privacy. This policy explains how our browser security audit and virus scanning tool handles (or, more accurately, doesn't handle) your data.

Our core principle is simple: your data never leaves your browser. CheckYourWeb is designed as a fully client-side application. Every security check and file scan runs locally using JavaScript and standard Web APIs — no server-side processing, no cloud uploads, no data collection whatsoever.

We do NOT collect any data. This includes, but is not limited to:

• Personal information (name, email, IP address)
• Browser security scan results
• Files you scan for viruses
• File hashes, names, or metadata
• Browsing history or usage patterns
• Device information or telemetry

We have no user accounts, no sign-up process, and no backend database. There is literally no mechanism in the application to collect or transmit your data.

All browser security audits run entirely within your browser using standard Web APIs. The checks analyze your browser's configuration, security headers, privacy settings, and permission states.

No network requests are made during the audit process. Results are computed locally and displayed in your browser. When you close the tab or navigate away, the results are discarded completely.

Files are never uploaded anywhere. When you select a file for virus scanning, it is processed entirely in your browser:

• SHA-256 hashes are computed locally using the Web Crypto API
• Hash comparisons are performed against a bundled, client-side database
• Heuristic analysis runs via JavaScript in the browser's sandbox
• File contents are read into memory temporarily and released after scanning

At no point does the file, its contents, its hash, or any metadata leave your device.

We only use localStorage for a single purpose: saving your theme preference (light or dark mode). This is stored under the key checkyourweb-theme.

We do not use cookies for tracking, analytics, advertising, or any other purpose. No session cookies, no authentication cookies, no third-party cookies.

We do not use any third-party analytics, tracking, or advertising services. This means:

• No Google Analytics or similar tracking tools
• No Facebook Pixel or social media trackers
• No advertising networks or retargeting scripts
• No CDN-hosted fonts or assets that could track requests
• No error reporting services that transmit user data

The application is self-contained. All assets, scripts, and databases are bundled with the application and served directly.

If we make changes to this privacy policy, we will update it on this page and revise the “Last updated” date below. Since CheckYourWeb collects no data, changes are unlikely to be significant. We encourage you to review this page periodically for any updates.

If you have questions or concerns about this privacy policy or CheckYourWeb's privacy practices, you can reach us through our GitHub repository. We welcome issues, discussions, and pull requests.

As an open-source project, our entire codebase is publicly available for review. You can verify every privacy claim we make by inspecting the source code yourself.