Privacy

Hide and Seek keeps as little as it can, for as short a time as it can, and never sells or shares any of it.

When you scan a site

We store the address you typed, the report, and when it ran. Reports are not listed anywhere, and search engines are asked not to index them; anyone with a report’s link can see it, so share the link only with people you want to see it. Every scan and its report is deleted after 30 days, except the one shown as the example on our home page.

To keep the scanner from being used against anyone, we limit how many scans one visitor can start in an hour. For that we keep a one-way hash of your IP address, salted so it can’t be reversed or matched against other sites, alongside the scan. We don’t keep the address itself.

When you leave an email address

We store it, with the same hash, to tell you when Recall is out of hiding. You get one confirmation now and one email then. Ask us at hello@hideandseek.bot and we’ll delete it.

When you buy a plan

Your account is your email address and the sites you add, with a count for each site every week. Stripe takes the payment; we never see or store your card, only Stripe’s reference to your subscription. Logging in sets one cookie, which keeps you logged in for a year and does nothing else. Your sites’ weekly reports are kept for 30 days like any other; the numbers stay as long as your account does. Ask us at hello@hideandseek.bot to delete the account and everything in it.

What we don’t do

No cookies but that one, no analytics, no tracking pixels, and no third-party scripts. The fonts are served from here, not from a font service.