Transparency

Watchpost launched in October 2026 and has no income yet. Once donations, sponsorships or ads begin, we will publish monthly totals and running costs here.

• Scans: the URL, findings and short evidence. Secrets found in your JavaScript are stored redacted (first and last four characters only).
• Accounts: your email address and, if you sign in with Google or GitHub, your name and avatar.
• IP addresses: stored only as one-way hashes, for rate limiting and the security log.

We never store page content beyond evidence for a finding, and never sell data. Details are in the privacy policy.

We scan only URLs that people submit. Deep checks run only on domains whose ownership has been verified. Every request carries an identifying User-Agent, and site owners can opt out at any time. See scanner and opt-out.

We have received no requests for user data to date. If we receive any, we will publish the number of requests and how we responded here, to the extent the law allows.