Privacy

We fetch, parse, and forget.

This is a plain-English note, not a legal product. CardScope is a small utility. We try to collect as little as possible.

What happens when you check a URL

We load the page you submitted and, if there is one, the preview image. We read the Open Graph, Twitter, title, and description tags in memory, then discard the HTML. We do not store page HTML, cookies from the target site, or a screenshot of the live page. A site audit also reads robots.txt, the sitemap, and each page it checks, the same way, and discards them too.

What we do store

• Free checks. We count how many free checks you run each day so the limit holds. The count is stored with a short hash of your IP address, not the address itself, and it expires within two days. We do not keep a list of the URLs you checked. Pro checks are not counted.
• Upgrade totals. We keep site-wide counts of free checks, upgrade clicks, checkout starts, and purchases. Those totals are not tied to you or to the URLs you submit.
• Pro licenses. If you buy Pro, we store a hash of your license key and a reference to your Stripe payment. We also keep the license key so we can show it again after you pay, and we email it to the address you gave Stripe. We keep a hash of that address so we can send the same key again. Your browser stores a copy in a cookie.
• Shared reports (Pro). A report is the tags and previews you already saw, not the page HTML. It expires after 7 days. Anyone with the link can view it.

The tag generator

The Open Graph tag generator builds meta tags in your browser from what you type. Those fields are not sent to us, and using it does not count as a check.

What we don’t do

• No accounts, no mailing list, no tracking pixels.
• No selling of URLs you check.
• No live-page screenshots. Previews are reconstructed from meta tags.

Third parties

The site is hosted on Cloudflare, which keeps the request logs that come with hosting it. Stripe handles payment. We never see your card number. The license email goes out through Resend. It is one message with the key, not a mailing list.

Your choices

Don’t submit a URL you aren’t allowed to request. If you use Pro, treat the license key like a password. To remove the license from this browser, clear cookies for cardscope.dev.