Privacy Policy
This site scans other websites for how they handle personal data. This page explains, with the same precision, what happens to yours. It is short because we process very little.
Last updated 2 September 2026 · GDPR · ePrivacy
Who we are
compliancemonitor.io is operated by eSolutions Softhouse Limited, Paphos, Cyprus. Full company details are on the imprint. For the purposes of the EU General Data Protection Regulation (GDPR) we are the data controller for the personal data described on this page.
What this site is
compliancemonitor.io is a static website hosted on Cloudflare Pages. It offers a free, anonymous scan of any public website and a public report of the result. There are no accounts, no sign-up, no passwords, no billing and no newsletter. There is nothing to log in to, so there is no profile of you to keep.
What we process
The URL you submit
When you start a scan, your browser sends the URL you pasted directly to our scanning service. The service loads that website in a real browser and records the cookies it sets, the network requests it makes, the scripts it loads, how its consent banner behaves and which fingerprinting APIs it calls, before and after interacting with the banner. This is data about a website, not about you.
Your IP address
The scanning service uses your IP address for one purpose: to enforce the limit of five scans per hour per IP address. It is not published with the report. Repeat scans of the same website within 60 minutes return the existing report instead of starting a new one.
The scan report
Each scan produces a report, an evidence archive and two screenshots of the scanned website. They are stored in Cloudflare R2 storage in our own Cloudflare account and deleted seven days after the scan. Report links are public: anyone who has the link can open the report. We may remove any report at our discretion.
Messages you send us
The contact form opens your own mail client. We receive only what you choose to send, typically your name, your email address and your message, and we keep it for as long as we need to handle your request.
Visiting the site itself
The site sets no cookies and runs no analytics, no advertising tags and no cross-site identifiers. Cloudflare serves the pages and runs its bot protection at the edge, which means Cloudflare handles the connection data of each request on our behalf. Details are in the Cookie Policy.
What we do not do
- We do not sell, rent or share personal data.
- We do not profile visitors or advertise to them.
- We do not collect email addresses on the site.
Legal basis
We rely on legitimate interest, GDPR Art. 6(1)(f), for running the free scan you request, for enforcing the rate limit, for keeping the site secure and for answering the messages you send us. We balance this interest against your rights, and you can object at any time using the contact details below.
Processors
One company processes data on our behalf:
- Cloudflare, Inc. (hosting, CDN, DNS, R2 storage and bot protection), under Cloudflare's Data Processing Addendum, which incorporates the European Commission's Standard Contractual Clauses for any transfer outside the EEA.
Nothing else. We do not pass personal data to any other party unless the law requires it.
Retention
| Data | Retention |
|---|---|
| Scan report, evidence archive and screenshots | Deleted seven days after the scan |
| IP address used for rate limiting | Used only to count scans per hour. Not published with the report. |
| Messages you send us | For as long as needed to handle your request |
Your rights
These rights apply to every visitor, wherever you live. Under GDPR they are set out in Articles 15 to 22:
- Access: a copy of the personal data we hold about you
- Rectification: correction of anything that is wrong
- Erasure: deletion of your personal data
- Restriction and objection: pausing or stopping certain processing
- Portability: your data in a machine-readable format
To exercise any of them, email [email protected]. We answer within one month, as GDPR Art. 12(3) requires. You also have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy) or with the supervisory authority where you live.
Changes to this policy
When this policy changes, the new version is posted on this page with the date of the change at the top. If we ever add a processor, a new purpose or any form of analytics, this page changes before it goes live.
Contact
- Email: [email protected]
- Postal: eSolutions Softhouse Limited, Paphos, Cyprus (see the imprint)
- Supervisory authority: Commissioner for Personal Data Protection of Cyprus