Privacy Policy

Last updated: 14 October 2026

What the scanner collects

When you submit a website address, our server fetches that site's public pages the same way a browser or search engine would, and analyses them. We store the address you scanned, the resulting report and your IP address for up to 24 hours to serve cached results and to enforce fair-use limits. We do not sell or share this data.

Cookies and analytics

itsmalicious.com sets no tracking cookies and loads no third-party analytics or advertising scripts.

The WordPress plugin

The itsMalicious plugin runs entirely on your own server and sends no usage data or telemetry to us. The external services it may contact (WordPress.org, WPVulnerability, Have I Been Pwned, geolocation providers you choose) are documented in the plugin readme and are used only when the related feature is enabled.

Contact

Questions about privacy: hello@itsmalicious.com.