Privacy

Files you scan

Files are read by JavaScript in your browser tab. They are not uploaded or stored. The scanner page's security policy blocks it from making network requests.

Unlock flag

If you buy the full version, this site stores one value in your browser's local storage: dotfile_unlocked set to 1. There is no account. Clearing this site's data removes the flag. Opening your bookmarked confirmation page sets it again.

Payments

Payments are handled by Stripe on Stripe's own pages, under Stripe's privacy policy. This site never receives your card details. After payment Stripe sends you to a confirmation page. Its address may include a checkout session reference, which this site's code does not store.

Contact form

If you send a message, this site stores:

• the topic, your name (if given), your reply address and your message;
• the time it was sent and the product name;
• a one-way hash of your IP address combined with a secret value. This is used only to limit each sender to 5 messages per hour.

Messages are stored in a Cloudflare D1 database and read by the site owner. There is no automatic deletion schedule. To have a message deleted, ask through the contact form.

Hosting

The site is hosted on Cloudflare Pages. Cloudflare handles requests to deliver the site, under Cloudflare's own privacy policy.

What this site does not use

No analytics, no advertising trackers, no third-party scripts and no cookies set by this site.