Privacy notice
Controller: AFC Entity Radar · contact@example.com
What we process and why
- Account data (email, password hash, chosen use type, plan): to provide your account — contract (GDPR Art. 6(1)(b)). Stored with Supabase in the EU region we select.
- Usage counters: number of checks per account, or per anonymised connection (a daily-rotating, irreversible hash of the IP address): to enforce free limits and prevent abuse — legitimate interest (Art. 6(1)(f)). Deleted after 120 days.
- Screened names are never stored or logged. They are processed in memory to return the result.
- Payments are handled by Stripe; we never see card details.
- Security logs kept by our hosting provider Netlify for a short period.
Public data about screened people
Results come from official lists and public sources for anti-money-laundering, counter-terrorist-financing and fraud prevention purposes. If you believe information about you is wrong, contact us and the original source; we will review it.
Your rights
Access, correction, deletion (delete your account any time on the account page), restriction, portability and objection, and the right to complain to your data-protection authority.
Cookies
No advertising or tracking cookies. Sign-in stores a session token in your browser's local storage.
Website statistics
We count visits with our own cookieless statistics, stored in the EU (Supabase, Frankfurt). For each page view we record the page address without any search terms, the website you came from (name only), campaign tags in the link, approximate location (country, region, city) derived from the connection, device type, browser, operating system, language, time on page and scroll depth. Visitors are identified only by a code calculated from the network address and browser that changes every day and cannot be reversed — we do not store IP addresses, do not use cookies or similar identifiers, and cannot recognise you across days or websites. Names you screen are never recorded. Statistics are deleted after 13 months. Legal basis: legitimate interest in understanding and improving the service (Art. 6(1)(f) GDPR).