privacy policy

the scan runs on your device

The XPOSD scan runs entirely in your browser. The signals it reads (browser, device and connection details) are processed locally. The results are shown to you and kept in your browser's local storage. We do not receive or store them unless you create an account and choose to save them.

The dossier is an estimate. It is inferred from generic browser signals and statistical assumptions, not from any private database. It is not a statement of fact about you.

what we collect

If you create an account: your email address and a securely hashed password (handled by Supabase). If you subscribe: payments are processed by Stripe. We never see or store your card number. We keep your subscription status and Stripe customer ID.

what we don't do

We do not sell your data and we do not share it with advertisers.

your choices

You can clear your scan at any time by clearing your browser's site data. To delete your account and associated data, use the delete request option in your dashboard settings or contact us.

service providers

We use Vercel (hosting), Supabase (accounts and database) and Stripe (payments). Each processes data only to provide its service to us.