Privacy
Last changed 31 October 2026.
Two kinds of information pass through GuardCue: things about you, and things about your site. This page covers both, in plain English, and it is the whole policy.
Who decides
For information about you, we decide what is collected and why: we are its controller. We use it because you asked for the service (to run your account and charge you), because we have a legitimate interest (keeping the service secure, fixing errors, counting visits), or because you agreed (an emailed result you asked for). For your customers' data that a check sees, you decide and we act for you, as described under About your site.
About you
What we collect. Your email address, when you ask to see a full report or sign in. The addresses of the sites you check. If you pay, your name and what you bought; your card details go to Paddle, who sells you the plan, and never reach us.
Visits. We count visits to this website and to your account pages with Vercel Web Analytics: which pages were viewed and from which country, with no cookies and nothing that identifies you. We also note a few steps (a check started, a checkout opened), never with a site address or an email. If you say yes to analytics cookies, Google Analytics counts the same visits in more detail, as the cookies page explains.
Where you came from. When you start a free check we keep, with that check, the name of the website that sent you (for example google.com, never the full address), the tags on our own links, and the first of our pages you saw. If you open an account, it keeps the first of these. It tells us which places bring people who find us useful, and nothing about you beyond that.
When our code breaks. Errors are sent to Sentry so we can fix them. Keys, email addresses, visitor addresses and anything you typed are removed before an error leaves.
Why. To sign you in without a password, to show you your own reports, to email you when a site changes, and to charge you what you agreed to.
What we do not do. We do not sell it, share it with advertisers, or use it for anything other than running the service. We do not build a profile of you.
Emails. We email you sign-in links, receipts, and alerts about your own sites. Alerts only go out for sites you have asked us to watch, and stop when you stop watching. We do not send marketing email unless you ask for it.
Emailing you a result. If you ask us to email you the results of a check, we keep that address with that one check, use it only to send you that result (or to tell you it is delayed), and delete it with the check. A check nobody signed in to keep is deleted after 30 days.
About your site
What a check reads. The public pages of the address you gave us, and the public addresses your app talks to, the same way any visitor’s browser would. Deeper checks run only after you prove the site is yours and switch them on.
What we keep from a finding. A count, the names of the columns involved, and one sample record with every value blanked past its first two characters. A picture of a leaking screen is blanked the same way before it is saved. We do not keep your customers’ data. This limit is enforced by the code that saves a finding.
Keys you give us. Encrypted before storage, never displayed again, used only for the checks they unlock, and deleted the moment you remove them.
Your customers. Where a check sees data belonging to your customers, you are the one responsible for that data and we act on your instructions. The terms for that are in our data processing terms.
Cookies
One cookie, to keep you signed in to your account. Nothing for advertising, nothing for tracking you across other sites. The public site sets no cookie at all until you sign in.
Who else sees it
We share information only with the companies we rely on to run the service, each seeing only what its job needs. Paddle sells you the plan as our Merchant of Record, so it receives your name, email, country, card details and what you bought, and handles them under its own privacy notice.
- Supabase: Sign-in and the database that holds accounts, sites and findings. Sees: Your email address, your sites, your findings and scores.
- Paddle: Selling you the plan (Merchant of Record): charging, tax, invoices and refunds. Sees: Your email, name, country and card details (which we never see), and what you bought.
- Vercel: Hosting this website and the account pages, and counting visits (Web Analytics, no cookies). Sees: Your IP address, as any web host does. For visit counts, the pages viewed and the country, nothing that identifies you.
- Railway: Running our servers and the checks. Sees: What the service stores and processes, as its host.
- Sentry: Telling us when our code breaks. Sees: The error and where it happened. Keys, emails, visitor addresses and request contents are removed before anything is sent.
- GitHub: Reading your code, only if you connect it. Sees: Which of your projects you let us read. The copy we read is deleted when the check ends.
- Anthropic: Polishing the wording of a finding. Sees: Table names, column names and counts from a finding. Never a record, never a customer’s details.
- Resend: Sending email. Sees: Your email address and the message we send you.
- Google (Analytics): Counting visits in more detail, only if you say yes to analytics cookies. Sees: The pages you view, where you came from, your rough location and device. Advertising features are off.
- Google (PageSpeed Insights): Measuring how fast your pages load. Sees: The public addresses of the pages we measure.
- Slack: Alerts, only if you connect it. Sees: The alert text you asked us to post.
Most of these companies store data in the United States. Where your information leaves the UK or the European Union, it is protected by the standard contractual clauses each of them signs.
Keeping it safe
Everything travels encrypted, the database is encrypted where it is stored, keys you give us are encrypted again before they are saved, and only the people running GuardCue can reach the data.
How long we keep it
Your account and its reports for as long as you have an account, and for thirty days after you close it, in case you change your mind. Free reports with no account are kept for thirty days. Backups are removed within a further thirty days.
Your rights
You can see everything we hold about you, correct it, download it, or have it deleted. Email support@guardcue.com and we will do it within thirty days, usually much sooner. If you are in the UK or the European Union you also have the right to complain to your data protection authority.
Changes
If this page changes in a way that matters, we email account holders before it takes effect. The date at the top is the date of the last change.
Who we are
Zohaib Umar Yousaf, a sole trader trading as Hexspire and GuardCue, Pakistan. Questions to support@guardcue.com.