Privacy policy
Last updated 11 November 2026. This is a first version, written without a lawyer's review.
The short version
We do not store the text you scan. We score it, keep the result and throw the text away. We set one cookie, so that your free allowance stays yours. We use no tracking cookies and no advertising, and we never use your texts to train our models.
Who is responsible
The controller is Mikhail Podrabinek, an individual based in Spain who runs supadetect.com. Contact: [email protected].
What we process, and why
| Data | Why | How long |
|---|---|---|
| The text you scan | To produce your result (contract) | Only while your Scan runs, in memory and an encrypted queue entry, for an hour at most. Uploaded files are deleted when their Scan ends. Never written to logs. |
| Scan results: scores, where highlights fall, word count, language, Engine, date | To show you the result, history and share links (contract) | Without an account: 30 days. With an account: until you delete them. |
| Saved Documents (only if you choose to save one) | To show your highlighted text later (contract) | Encrypted at rest, until you delete it |
| A first-party cookie with a random identifier | To hold your free monthly allowance (strictly necessary) | Up to 13 months |
| Your IP address | To stop abuse, with a daily ceiling per address (legitimate interest) | Counters expire within a day |
| Your email, or your Google sign-in name and email | To run your account (contract) | Until you delete your account |
| Product events without any text (a Scan started, a Verdict shown) | To improve the product (legitimate interest) | Up to 24 months |
Payments are handled by Paddle, which is the merchant of record and processes your payment details as an independent controller under its own privacy policy. We receive only your subscription status.
Who else is involved
- Our server is in the EU (netcup, Germany).
- Cloudflare protects and delivers the site, sends our emails and provides cookieless visit statistics. It may process your IP address. Transfers outside the EU rely on the EU's standard contractual clauses and the EU–US Data Privacy Framework.
- If you sign in with Google, Google tells us your name and email.
Your rights
You can ask to access, correct, delete or export your data, and object to processing based on legitimate interest. Write to [email protected]. You can delete your Scans, Documents and account yourself at any time. You may also complain to the Spanish data protection authority (AEPD, aepd.es).
Training
Our models are trained only on public collections and on texts we generate ourselves, never on what you scan.