Privacy
Written to match what the product does, not to hedge.
What we store
- The canonical release manifest you confirmed, and the report produced from it.
- Operational records needed to run and settle a paid check.
- No wallet private key, seed, or payment signature is received or stored. A probe input, if provided, is transient and represented only by a digest in evidence, never stored raw.
Report privacy
- Reports open only with their capability token, which travels in the URL fragment and is never sent to our servers, logs, or analytics.
- There is no public index of reports and no dynamic public report page.
- Anyone with a full link can read that report, so share links deliberately.
Retention
- Reports are retained for 30 days and then removed.
- After removal the link resolves to an unavailable state that reveals nothing about the former report.
- Download the report JSON if you need a durable copy.
Probing
- PreFlight observes only the public runtime you declare, over the declared method, and pays as a real buyer.
- It does not attempt to bypass authentication.
Questions go to how it works, or reach the maintainer at @vinaystwt.