Privacy Policy

1. Introduction

SiteRay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website trust analysis service, including the SiteRay website (siteray.eu) and the SiteRay browser extension for Firefox and Chrome (collectively, the "Service").

2. Information We Collect

Personal Information

When you create an account, we collect:

• Email address
• Password (stored securely using industry-standard hashing)
• Account preferences and settings

Usage Information

We automatically collect:

• URLs of websites you scan
• Scan history and results
• Log data (IP address, browser type, access times)
• Device information

3. Browser Extension

The SiteRay browser extension provides trust scores for websites directly in your browser. This section explains what data the extension collects and how it is processed.

Authentication

The extension requires you to sign in with your SiteRay account before any data is collected or transmitted. No browsing data is sent to our servers until you explicitly log in. You may sign in with email and password, or via Google or GitHub OAuth. Your authentication tokens are stored locally in the browser's extension storage and are never shared with third parties.

Data Collected by the Extension

When you are signed in, the extension collects and transmits the following data:

• Domain names of websites you visit — When you navigate to a website or switch tabs, the extension sends the domain name (e.g. "example.com") to the SiteRay API to retrieve the trust score. Only the domain name is sent, not the full URL, page content, or any other browsing data.
• Scan requests — When you request a new scan or rescan via the extension popup, the domain name is sent to our API to initiate the analysis.

Why Domain Names Are Sent Automatically

The extension's core purpose is to show you trust scores for every website you visit, displayed as a badge on the extension icon and an optional trust bar on the page. To provide this at-a-glance information, the extension must look up the domain as you browse. This is the primary stated functionality of the extension and cannot work without transmitting domain names to our server.

Data NOT Collected by the Extension

The extension does not collect or transmit:

• Full page URLs, URL paths, or query parameters
• Page content, form data, or keystrokes
• Cookies, browsing history, or bookmarks
• Personal files or data from your device
• Data from local/internal network addresses (localhost, private IPs)
• Any data whatsoever when you are not signed in

Local Storage

The extension stores the following data locally on your device using the browser's extension storage API:

• Authentication tokens (for maintaining your signed-in session)
• User profile information (email, account tier)
• Display preferences (icon style, trust bar settings)
• A short-lived in-memory cache of recent domain lookups (cleared on restart)

Permissions

The extension requests the following browser permissions:

• tabs — To read the domain of the active tab and display the trust score badge
• storage — To store your authentication tokens and preferences locally
• alarms — To periodically check for scan completion in the background
• Content scripts on all sites — To display the optional trust bar indicator on web pages
• Host permission for api.siteray.eu — To communicate with the SiteRay API

Uninstalling the Extension

When you uninstall the extension, all locally stored data (tokens, preferences, cache) is automatically removed by the browser. Your SiteRay account and any scan history remain on our servers and can be deleted by contacting us or through your account settings.

4. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process your scan requests
• Send you important updates about your account
• Improve and optimize our Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers who assist in operating our Service
• Law enforcement when required by law
• Third parties in connection with a merger or acquisition

6. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure password hashing
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Scan results may be cached for performance purposes but are regularly purged. You may request deletion of your account and associated data at any time.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Export your data in a portable format

9. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes. You can control cookie settings through your browser.

10. Third-Party Services

Our Service may integrate with third-party services for analysis purposes (e.g., SSL certificate verification, DNS lookups). These services have their own privacy policies, and we encourage you to review them.

11. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@siteray.eu