What this service keeps about you, for how long, and who else sees it.

This site sets no cookies

No page on this site sets a cookie, and the free scanner's routes set none either. There is nothing to consent to and so there is no consent banner. The site loads no analytics, no fonts from other companies, and no scripts from anyone else, and it writes nothing into your browser's storage. The account product, when it opens, will set one cookie to keep you signed in; it will say so then.

When you request a free scan

The address you enter is read up to the question mark: anything after it, and anything after a hash, is dropped before the scan is recorded or the page is fetched, so a name or a token in a query string never enters the record. What is kept is the address up to that point, the page's title, and the defects found on it.
Your network address is not kept. To limit how many scans one visitor can request, the service keeps a one-way hash of your address mixed with a secret value that only the server holds. Nobody, including us, can turn that hash back into the address, and without the secret it cannot be matched against a list of addresses.
The record is deleted 7 days after you requested it, along with the hash.
The record is reachable by anyone who has its link. The link is long and random, it is not listed anywhere, and it is not sent to search engines, but it is not private: if you share it, whoever you share it with can read it until it is deleted.

When you leave an email address

If you leave an address, we keep it, and the host name of the page you scanned, for 180 days, and then delete both. It is used to send you one email, a link to your record and an example of a full report, and for nothing else. We do not add it to a list.
One address is kept per scan. If you leave a second address on the same scan, it replaces the first.
The email is sent once per address, through Resend, when the scan has run. If the scan stopped before it read the page, the email says so and links to the record all the same.

What the scanner keeps about other people's pages

When a page is scanned, the record holds the page's address, its title, its HTTP status, and for each defect the failing element's markup and accessible name. Before either is kept, email addresses, phone numbers, long runs of digits and every form value in them are replaced with placeholders, because real pages carry real people's details. No screenshot and no full copy of any page is kept. The scanner's own behaviour on a site is described on its own page, linked at the foot of every page.

Server logs

Our own application logs record a request identifier and what happened, not your network address. The companies that host the service keep their own logs of each request, which include your address and the path you requested, for as long as their retention runs. Because a record's link is part of the path, those platform logs also hold record links. We do not read those logs except to find a fault.

Who else handles the data

Railway, which hosts the service's interface and its database, in a European Union region.
Hetzner Online GmbH, in Germany, which hosts the scanner. Every scan of any site is made from a single server there.
GoDaddy, which holds the domain name and forwards visits to keptrecord.co without www to this site, so it sees the first request of anyone who typed the bare address.
Let's Encrypt, which issues the site's certificate. It receives nothing about visitors.
Resend, Inc., in the United States, which carries the one email we send, and so receives the address you left and the message itself.
Nobody else. There is no advertising and no analytics service.

Accounts, when they open

There are no customer accounts yet. When there are, an account will hold an email address, a one-way hash of the password, and a one-way hash of each session; failed sign-in attempts are counted against the email address, without an address. This page will be rewritten before the first account is opened.

Your rights, and how to use them

Write to idan@keptrecord.co. Because the free scanner keeps no address of yours, we can act on a request only if you give us the record's link or the email address you left. We will delete either on request, and we will tell you what we hold, in plain words, within a month.

About this notice

Kept Record is an independent service, run by its founder and reachable at idan@keptrecord.co.

Written on 15 September 2026. It changes when the system changes, and the date changes with it.

This page describes what the system does, written by the people who built it. It has not yet been reviewed by a lawyer, and it will be before anything on this site can be bought.