MudCrafts Safety Check

Privacy Policy

Last updated: 2026-08-28

This policy explains what data the MudCrafts Safety Check service (“the Service”, “we”, “us”) processes when you run a website safety check, and how we handle it. MudCrafts is a digital crafting agency based in Canada.

1. What a scan collects

When you submit a URL for a check, the Service processes only:

The URL you submit and the region you select.
Publicly available responses returned by that URL — HTTP response headers, the public HTML of the landing page, DNS records for the domain, and the presence/absence of common public files. All access is read-only (GET and DNS lookups only); we never log in, submit forms, or modify the target in any way.
Basic request metadata — your IP address and timestamp — used transiently for rate-limiting and abuse prevention.

2. What we do not store

We do not retain the scanned page content, response bodies, or the generated report on our servers beyond the request that produced it. The report is returned to your browser; keeping a copy is up to you.

No scanned website content is persisted after the report is generated.
No account is required and we do not build advertising profiles.
Rate-limit counters hold your IP only briefly in memory and expire automatically; they are never sold or shared.

3. Authorization & acceptable use

You may only scan websites you own or are explicitly authorized to assess. Before a scan runs you must affirm this authorization. Running the Service against systems you do not control may violate law and is prohibited.

4. Cookies & tracking

The Service uses no third-party trackers, analytics, advertising cookies, or external fonts/scripts. The site is fully self-contained. Any storage used is strictly first-party and functional.

5. Legal bases & your rights

Where GDPR, PIPEDA, Quebec’s Law 25, or similar laws apply, our processing rests on legitimate interest (providing a security assessment you requested) and your affirmation of authorization. You may request access to, or deletion of, any personal data we hold about you — in practice we hold no durable personal data beyond transient rate-limit metadata.

6. Data location

Scans run on our hosting provider’s infrastructure. Because we do not persist scan data, there is no long-term cross-border storage of your content.

7. Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

8. Contact

Privacy questions: privacy@mudcrafts.com. See also our Terms & Disclaimer.