Privacy
Last changed 16 September 2026.
Two kinds of information pass through GuardCue: things about you, and things about your site. This page covers both, in plain English, and it is the whole policy.
About you
What we collect. Your email address, when you ask to see a full report or sign in. The addresses of the sites you check. If you pay, your name and what you bought; your card details go to Stripe and never reach us.
Why. To sign you in without a password, to show you your own reports, to email you when a site changes, and to charge you what you agreed to.
What we do not do. We do not sell it, share it with advertisers, or use it for anything other than running the service. We do not build a profile of you.
Emails. We email you sign-in links, receipts, and alerts about your own sites. Alerts only go out for sites you have asked us to watch, and stop when you stop watching. We do not send marketing email unless you ask for it.
About your site
What a check reads. The public pages of the address you gave us, and the public addresses your app talks to, the same way any visitor’s browser would. Deeper checks run only after you prove the site is yours and switch them on.
What we keep from a finding. A count, the names of the columns involved, and one sample record with every value blanked past its first two characters. A picture of a leaking screen is blanked the same way before it is saved. We do not keep your customers’ data. This limit is enforced by the code that saves a finding.
Keys you give us. Encrypted before storage, never displayed again, used only for the checks they unlock, and deleted the moment you remove them.
Your customers. Where a check sees data belonging to your customers, you are the one responsible for that data and we act on your instructions. The terms for that are in our data processing terms.
Cookies
One cookie, to keep you signed in to your account. Nothing for advertising, nothing for tracking you across other sites. The public site sets no cookie at all until you sign in.
Who else sees it
A short list of companies we rely on to run the service, each named with what it sees, is on the data processing page.
How long we keep it
Your account and its reports for as long as you have an account, and for thirty days after you close it, in case you change your mind. Free reports with no account are kept for thirty days. Backups are removed within a further thirty days.
Your rights
You can see everything we hold about you, correct it, download it, or have it deleted. Email support@guardcue.com and we will do it within thirty days, usually much sooner. If you are in the UK or the European Union you also have the right to complain to your data protection authority.
Changes
If this page changes in a way that matters, we email account holders before it takes effect. The date at the top is the date of the last change.
Who we are
HexSpire, HexSpire, Gujranwala, Punjab, Pakistan. Questions to support@guardcue.com.