Sign inGet started
legal

Privacy policy

DRAFT: not yet reviewed by a solicitor. Last updated 2 November 2026.

Who we are

Securemark.dev ("Securemark", "we") is operated by Louis Wright, a sole trader in the United Kingdom, who is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018. Contact: [email protected].

What we collect

  • Account data: email address, and your GitHub username and public profile if you sign in with GitHub. Passwords, if used, are stored hashed by our authentication provider.
  • Project data: domains and repositories you add, verification tokens, and scan results.
  • Billing data: handled by Stripe. We store your Stripe customer ID and subscription status, never your card details.
  • Technical logs: badge and API requests are processed by Cloudflare. Short-lived logs may include IP address and user-agent for security and abuse prevention.

This marketing site sets no cookies and uses no analytics, trackers or third-party fonts. The dashboard at app.securemark.dev stores a sign-in session in your browser's local storage.

Scan data about third-party domains

Scans read publicly available technical information (HTTP headers, TLS certificates, DNS records). This is not personal data in normal circumstances. See SecuremarkBot for opt-out.

Why we use it (lawful bases)

  • Contract: to provide the service you signed up for and to bill you.
  • Legitimate interests: security, abuse prevention, and service improvement.
  • Legal obligation: tax and accounting records (kept for 6 years).

Processors

Supabase (database and authentication, EU region), Cloudflare (hosting, edge delivery), Stripe (payments and tax), GitHub (sign-in, repository data, scan runners), and an email delivery provider for account emails. Where data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum.

Retention

Account and project data are kept while your account is active and deleted within 30 days of account deletion. Scan history follows your plan (30 days on Free, 13 months on Pro and Team).

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing by emailing us. You may also complain to the Information Commissioner's Office (ico.org.uk).

Changes

We'll post updates here and email account holders about material changes.