What we collect

• The GitHub URL, live URL, or ZIP file you submit for analysis
• The analysis results — findings, score, and layer breakdown
• Your IP address for rate limiting (not stored permanently)
• If you join the waitlist — your email address
• If you rate a report — your thumbs up/down, and any comment or email you choose to add
• If you buy a deep scan or sign in — your email address, so we can identify your purchase and let you sign back in

What we do not collect

• The free analysis needs no account — we don't know who you are unless you buy a deep scan or sign in
• No cookies or tracking beyond Plausible Analytics (privacy-friendly, no personal data)
• No payment card details — Stripe handles payment directly and Verilay never sees or stores your card number
• No access to your GitHub account beyond what you explicitly submit — we read public repos only via GitHub API, and never write to or modify any repository

How your data is stored

Analysis reports are stored in Supabase (hosted in the EU) linked to a random report ID. Reports are accessible only via your unique share link. We do not publish, share, or sell individual report data.

Reports are kept so your share link keeps working and so we can improve the product. You can delete your report at any time using the Delete Report button on your report page, which removes the submitted code and findings.

Accounts and the deep scan

Signing in uses a passwordless email link or code — we never ask for or store a password. Buying a deep scan records your email, the app it was purchased for, the amount paid, and the purchase date; this comes from Stripe, which does not verify the email it collects, so a payment on its own does not sign you in. Signing in with that same email afterward links your purchase to an account so your reports are still there when you come back.

Deep-scan reports are tied to your account rather than a share link alone, and are kept for as long as your account exists. You can request account and purchase-record deletion at any time by emailing [email protected] — note that Stripe keeps its own transaction records independently, for tax and accounting purposes, which we cannot delete on your behalf.

Statistics

We track aggregate statistics — total analyses run, score distribution (how many A/B/C/D/F grades), and analysis method. This data is anonymised and used to improve the product.

Waitlist emails

If you join the waitlist, your email is stored in Supabase and used only to notify you when new features launch. You can request deletion by emailing [email protected].

Feedback

If you rate a report and choose to leave a comment or email, these are stored with that report in Supabase. Email is optional and used only to follow up about the feedback you left — for example to let you know an issue was fixed. You can request deletion by emailing [email protected].

Your rights

• Delete your report anytime using the Delete Report button
• Request deletion of your account, purchase record, waitlist entry, or feedback email at [email protected]
• If you've never signed in or paid, there's no account data to delete — the free tool remains fully anonymous

Contact

Questions about privacy: [email protected]