Last updated: 23 October 2026
When you request a free scan, we collect the website domain you submit and your email address, so we can run the scan and send you the report. We also store the scan time and results. If you confirm that you own the site or have permission to test it, we store that confirmation and your IP address. If you ask for monitoring, we store your subscription and its status.
To run the checks, the domain (never your email) is looked up in public services such as certificate logs, vulnerability databases, Google Safe Browsing, Shodan and Google PageSpeed. Report emails are sent through Brevo.
We process your data to perform the service you requested (Art. 6(1)(b) GDPR) and based on our legitimate interest in securing the websites whose owners ask us to scan them (Art. 6(1)(f) GDPR).
Data is stored on Cloudflare infrastructure. Scan requests and the snapshot used to compare with your next scan are kept for up to 12 months, then deleted. Shareable report links expire after 30 days. Monitoring subscriptions are kept until you unsubscribe.
You may request access, correction or deletion of your data at any time by emailing [email protected].
ScanMend · [email protected]
ScanMend is operated by Braižas (braizas.lt), Lithuania.