Privacy Policy

1. Information We Collect

When you use ThreatKestrel tools, we may collect:

• Scan inputs — domain names, IP addresses, and email headers you submit to our tools.
• Usage data — which tools you use, timestamps, and result statuses (pass/fail/warning).
• Technical data — your IP address and browser user-agent, used for rate limiting and abuse prevention.
• Analytics — page views and session data via Google Analytics 4 (anonymised).

We do not require account registration. No passwords, emails, or personal profiles are collected.

2. How We Use Your Data

• To perform the DNS, email, SSL, and network lookups you request.
• To cache results temporarily (up to 60 minutes) to reduce redundant network calls.
• To enforce per-IP rate limits and prevent abuse of our infrastructure.
• To generate anonymised usage statistics that help us improve the tools.

3. Third-Party Services

• Google Analytics 4 — anonymised traffic analytics. Google Privacy Policy.
• Google Fonts — fonts loaded from fonts.gstatic.com.
• jsDelivr CDN — Bootstrap CSS/JS served from cdn.jsdelivr.net.
• DNS-over-HTTPS (Google) — used internally for blacklist lookups.

To produce a result, some tools send the domain, IP address or URL you submit to the threat-intelligence providers below. Only that value is sent — never your IP address, browser or any other detail about you.

• Google Safe Browsing — URL and domain reputation. Privacy Policy.
• VirusTotal — domain, URL and IP reputation. Privacy Policy.
• AbuseIPDB — IP abuse reports. Privacy Policy.
• ipinfo.io — IP geolocation and ASN data. Privacy Policy.

4. Cookies

We use a session cookie for CSRF protection (required for form security) and Google Analytics cookies for traffic measurement. No advertising or tracking cookies are set by ThreatKestrel directly.

5. Data Retention

Scan logs are retained for up to 90 days for abuse monitoring and are then permanently deleted by an automated daily job. Cached results expire after 60 minutes and expired entries are cleared by the same job. We never sell your data, and we do not share it for advertising or profiling. The only sharing that happens is described in section 3: the value you type into a tool is passed to the threat-intelligence provider needed to answer your query.

6. Your Rights

You may request deletion of any scan logs associated with your IP address by contacting us. Since we do not store personal accounts, no account deletion process is required.