Privacy Policy
Version 2026-06-10
1. Introduction
This policy explains how [COMPANY LEGAL NAME], [REGISTERED ADDRESS], Switzerland (“we”, “us”), the operator of cheatcode.ch, handles personal data when you use our security-scanning service. For any privacy question, use our contact form or email info@cheatcode.ch.
2. Information we collect
Account: your verified email address. Scan data: the target URL you provide or the source code you upload as a ZIP archive (filename and contents), together with the publicly accessible resources we fetch (such as HTML, HTTP headers, and JavaScript), and the resulting scan metadata and findings. Technical: your source IP address, used for rate-limiting and abuse prevention. Payment: payment data is handled by a third-party payment processor; we receive confirmation and subscription details, not your full card data. Logs: subscription and email-engagement records (for example, which transactional emails were sent).
3. How we use your information
We process your data to provide the service — running scans, delivering reports, and billing (performance of our contract with you); to prevent abuse, enforce rate limits, and improve accuracy (our legitimate interests); to send marketing email where you have consented; and to comply with legal obligations.
4. AI analysis and service providers
Your scan content is analysed using automated tooling and third-party artificial-intelligence models. When you start a scan, the content of your target is transmitted to our scanning infrastructure and to one or more third-party AI providers solely to identify potential security issues and generate your report. We do not use your submitted code or scan targets to train AI models, and we instruct our providers not to do so. We rely on the following categories of service providers (no names are published here): a third-party AI provider (analysis), a scanning-infrastructure host, a payment processor, an email provider, and a database host. Some processing may occur outside Switzerland or the EEA; where it does, transfers are covered by appropriate safeguards (such as standard contractual clauses). A current list of the categories of providers we use is available on request. Do not upload secrets, third-party personal data, or content you are not authorised to share; redact anything you do not want processed by an external AI provider.
5. Data retention
For one-time Check scans, the scan content and any uploaded ZIP archive are purged shortly after your report email is delivered. Watch scan results are retained for approximately 30 days. Account, subscription, and log records are kept for as long as necessary for the purposes described here or as required by law.
6. Data security
We apply industry-standard protections, including encryption in transit and at rest and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Analytics
We do not use third-party website-analytics or ad-tracking scripts. The operational records described above (email, scans, purchases) are first-party data we collect only to run the service, as set out in sections 2 and 3.
8. Your rights
Subject to applicable law, you may request access to, correction or deletion of your personal data, restriction of or objection to processing, and data portability. You can unsubscribe from emails via the link in any email, and cancel Watch from your account. To exercise your rights, use our contact form or email info@cheatcode.ch.
9. Complaints
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
10. Changes to this policy
We may update this policy from time to time. Changes take effect when published, and we will provide notice of significant changes. The version is shown above.
Questions about your data? Contact us.