Draft: this policy has not been reviewed by a lawyer yet and may change.
Privacy Policy
Last updated: October 15, 2026
What we collect
- Scan requests: the address you scan, the time, your IP address and your confirmation that you own or have permission to test the app.
- Scan results: the findings we generate. If we find a secret key, we only keep and show a masked fragment (e.g.
sk_liv鈥b), never the full key. - Supabase checks: we only count rows that are publicly readable. We never read, store or show the contents of your database.
Website analytics
Aggregate, cookieless page-view data from Vercel Web Analytics (see below).
Why
To run the scan, prevent abuse (rate limits, misuse investigations) and improve the service.
How long we keep it
Scan data and logs are deleted after 30 days.
Who we share it with
We don't sell your data. We use Vercel to host the service and to provide Web Analytics. When paid reports launch we plan to use Lemon Squeezy for payments, and this policy will be updated first. We may disclose information if the law requires it or to deal with abuse.
Analytics and cookies
We use Vercel Web Analytics, a cookieless analytics tool, to count page views in aggregate (for example which pages are visited, referrers, country and device type). It doesn't set cookies. We don't use advertising or tracking cookies.
Your choices
You can ask us to delete your scan data sooner by emailing hello@greenlightmyapp.com (pending, not yet monitored). Operator: [LEGAL COMPANY NAME, pending].
Changes
We may update this policy, and the date above will change when we do.