PRIVACY
Collect less. Keep what is needed.
The public site is deliberately lightweight. The testing service is designed to retain the information needed to operate authorised scans and diagnose findings, without treating secrets as QA evidence.
PUBLIC SITE
Minimal by default.
The static marketing pages do not deliberately fingerprint visitors or load third-party advertising pixels. Normal hosting and security logs can still contain network metadata such as IP address, User-Agent, requested path, timestamps and security events.
SERVICE DATA
Evidence should be proportionate to the test.
Shopsteddy may retain scan metadata, findings and supporting evidence needed to reproduce or investigate a result. Passwords, payment details and private access tokens are not diagnostic evidence and should not be stored as ordinary findings.
- Use the minimum evidence that proves the result.
- Keep authentication material separate from customer-visible QA artifacts.
- Apply account, security and retention controls to stored scan evidence.