Privacy Policy
1. Who is the data controller
Pandemonium Software Ltd (company number 16948391), registered office [REGISTERED OFFICE ADDRESS], is the controller of personal data processed through IndieShield. Contact: [support@yourdomain.com]
2. What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| The website address you scan | To perform the scan you requested | Performance of a contract |
| Your IP address | Rate limiting and abuse prevention | Legitimate interests |
| Email address (only if you buy) | To process payment and provide your unlock key | Performance of a contract |
| Payment details | Handled entirely by Stripe — we never see or store your card number | Performance of a contract |
3. What we do not keep
We do not store your scan results. Each scan is computed when you ask for it, returned to your browser, and discarded. There is no account and no database of reports tied to you.
4. Storage in your own browser
If you purchase access, your unlock key is stored in your browser's local storage so you don't have to re-enter it. It stays on your device, and you can clear it at any time by clearing site data. We do not use advertising or tracking cookies.
5. Who else processes data (sub-processors)
- Cloudflare — hosting and running the service at the network edge.
- Stripe — payment processing.
- Anthropic — where you request an AI-written fix plan, the findings for that scan are sent to Anthropic's API to generate the advice. This happens only when you explicitly ask for it.
6. International transfers
Some processors may process data outside the UK. Where that happens, it is done under safeguards recognised by UK data protection law, such as the International Data Transfer Agreement or UK Addendum.
7. How long we keep things
Scan results: not retained. Rate-limiting records: automatically deleted, typically within an hour. Purchase and unlock records: kept as long as needed to provide access and to meet our legal and accounting obligations.
8. Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to processing of your personal data, and to data portability. To exercise any of these, contact [support@yourdomain.com]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
9. Changes
We may update this policy; the date above shows the latest revision.