Privacy policy

This Privacy Policy explains how we collect, use, and protect your personal data when you use SubAnalyzer ("we," "our," or "us"). By using our website, you agree to the terms of this policy.

Information we collect

• Account information: When you sign up via Google login, we collect your name, email, and profile picture URL. When you sign up via email, we collect your email address directly
• Subscription data: We store your subscription ID to manage your access to premium features. Payment details are handled by Stripe
• Search data: We log the domains and subdomains you search for to track usage and improve our services
• Contact form data: When you use our contact form, we collect your name, email address, and message content
• IP addresses & logs: We store your IP address at the time of account creation for security purposes. Connection attempts may also be logged
• Cookies: We use a functional sessionid cookie (httpOnly, secure). This is essential for authentication and is not used for tracking
• Usage analytics: We use Google Analytics and PostHog to understand how the site is used, such as which pages are visited and which features are clicked. These tools may set their own cookies and identifiers, and PostHog data is collected through our own domain

How we collect your data

• Google OAuth when you create an account via Google login
• Directly from you when you sign up via passwordless email login or submit the contact form
• Cloudflare Turnstile for bot and spam prevention on email login, scan submission, and the contact form, which shares your IP address and interaction patterns with Cloudflare
• User interactions, such as searches and subscription updates
• Server logs that record access attempts and security events

How we use your data

• Provide and improve our services, including subdomain searches and subscription management
• Detect and prevent fraud, abuse, and unauthorized access
• Send transactional emails (e.g., account confirmations, subscription updates, security notifications)
• Send marketing emails (if opted in), with an option to unsubscribe
• Analyze website usage to enhance performance and user experience

Who we share your data with

We do not sell your data. However, we share information with third-party providers to operate our services:

• Stripe: To handle subscription payments securely
• Amazon Web Services (AWS): To send account-related and optional marketing emails
• Cloudflare: For DNS, DDoS protection, and bot prevention (Turnstile)
• Microsoft Azure: For hosting infrastructure and application monitoring via Application Insights
• Google: For website analytics via Google Analytics
• PostHog: For product analytics that shows us how features are used

How you can control your data

• Account deletion: You can delete your account from the dashboard. Upon deletion, scan data is retained in anonymized form (your user association is removed). Your Stripe customer ID mapping is preserved to ensure correct account association if you re-create your account
• Data access requests: You can request a copy of your data
• Email preferences: You can opt out of marketing emails via an unsubscribe link

Security measures

• Encryption of sensitive information
• Rate limiting and abuse detection mechanisms
• Continuous monitoring for unauthorized access

Data retention

• Scan data is retained indefinitely to provide historical results
• Server logs are retained for a limited period
• Account data is deleted upon request, except as noted in the Account Deletion section above

International data transfers

Your data may be processed in the United States and other countries where our service providers operate, including Microsoft Azure, Amazon Web Services, Stripe, Cloudflare, Google, and PostHog.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page, and we may notify you via email.

Contact us

If you have any questions about this Privacy Policy, please visit our contact page.