Privacy policy

Paxen Security is operated by Epiphani Studios LLC ("we"). This policy covers paxensecurity.com and the Paxen scanner.

What we collect

Domains you scan and the scan results: the addresses found, what each answered, and the findings. Findings record the kind of key or file and where it sits; the value of a key Paxen spots is kept out of the report.
Your email address, when you join the list, with the domain you entered.
Usage analytics through PostHog: pages viewed and buttons used, with every form field and on-page text masked in session recordings, and Do Not Track honored.
Request logs kept by Cloudflare, our hosting provider, including your IP address, used to limit the free scan to six an hour per visitor.

Why

To run the scans you ask for, show you the report, send you the plans and daily reports you sign up for, and improve the product.

Who processes it

Cloudflare (hosting and database), PostHog (analytics), and, for ranking findings on verified domains, OpenAI and Google models. Findings sent for ranking carry addresses, paths and plain descriptions only.

How long

Scan reports are kept for 12 months. List sign-ups are kept until you ask us to remove them. Rate-limit records are kept for 30 days.

Your choices

Ask us to delete your reports or your email at privacy@paxensecurity.com. We reply within 30 days.

Changes

We post changes here with a new effective date.