Privacy and processing

Before submitting text

The public scanner sends your submission to Secure Pride’s Cloudflare-hosted API. It does not run entirely on your device or within your organization.

Use invented examples or text you are authorized to share. Do not submit client records, health information, passwords, or details about someone’s identity. Masking happens after the server receives the original text.

Scanner processing

The current TypeScript scanner checks text against known patterns. Its request handler does not send the text to an external AI model. The application does not intentionally save the submitted text to a database or include it in its audit log.

Text and results are held in the page’s memory while you use it. Clear removes the displayed input and results; it does not delete hosting logs or undo a request already received. Copying a redacted draft places it on your device’s clipboard, which may sync across devices.

Application audit metadata

Each scan reaching the engine emits a structured log event. It includes a trace identifier, timestamp, hashed actor identifier, input length, detected data categories, injection severity, and policy action. The public interface uses an anonymous actor identifier.

These events exclude the submitted text, but their categories can still reveal sensitive context. A hashed identifier is not a guarantee of anonymity.

Hosting details still to verify

Cloudflare processes network requests and may handle connection and security metadata, such as IP addresses. We have not verified the deployment’s log retention, log access, or processing locations for this notice. We cannot promise zero hosting logs, a specific residency, or a deletion deadline.

If those details are essential to your work, do not submit sensitive information to the hosted scanner. Contact us to discuss the boundary first.

Contact and tracking

The public contact links open your email app. Sending a message discloses its contents and sender details to the email providers and recipient. Include only what is necessary for your question.

The site application does not include an analytics SDK or persist scanner text in browser storage. This statement does not cover hosting security logs or external sites you choose to visit.

Questions or deletion requests

Email hello@securepride.org to ask about processing or request deletion of information you provided. Do not resend sensitive records as proof of your request. What can be located or deleted depends on the information held and the hosting configuration.