Privacy Policy

1. Introduction

This Privacy Policy explains how Secrets.Tools ("we," "us," or "our") collects, uses, and protects your personal information. We are committed to protecting your privacy and ensuring transparency in our data practices.

2. Information We Collect

We collect and store only the following personal information:

• Email address (for account authentication)

3. Analytics and Third-Party Services

We use the following third-party services to operate our website:

• Google Analytics to understand how visitors interact with our website. This service may collect:
  • Usage data (pages visited, time spent on site)
  • Technical information (browser type, device type)
  • IP addresses (anonymized)

  You can opt-out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

• Cloudflare for content delivery network services, DDoS mitigation, and as a reverse proxy. Cloudflare may collect:
  • IP addresses and other network information
  • HTTP headers and request data
  • Performance and security data

  For more information about Cloudflare's privacy practices, please see Cloudflare's Privacy Policy.

4. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Contractual necessity: To provide you with our services
• Legitimate interests: To improve our services, ensure security, and prevent fraud
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with applicable laws

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Your data is stored on secure servers within the European Economic Area (EEA). When data is transferred outside the EEA (such as through our use of Cloudflare or Google Analytics), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. User accounts and associated data are kept until deletion is requested or after 24 months of inactivity.

6. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully.

7. Cookies and Similar Technologies

Our website uses the following types of cookies:

• Essential cookies: Necessary for website functionality
• Analytics cookies: To analyze website usage (via Google Analytics)
• Cloudflare cookies: For security and optimization purposes

When you first visit our website, we ask for your consent to set non-essential cookies. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer.

You can also control cookie preferences through your browser settings.

8. Data Processing of Scanned Websites

Our service scans websites for secrets, API keys, and other sensitive information. When you use our scanning tool:

• We process the URL and contents of the pages you request us to scan
• We store scan results for 90 days to provide you with historical information
• We do not claim ownership of the scanned data
• We implement strict access controls to protect scanned information

You are responsible for ensuring you have the legal right to scan any website you submit to our service.

9. Data Deletion

You can request the complete deletion of your account and associated data at any time by contacting us at [email protected]. We will process your request within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact us at:

• Email: [email protected]