What this website does with data.

Analytics

We measure site usage with a self-hosted instance of Umami, running on our own server. It sets no cookies and stores no identifiers in your browser. Your IP address is not stored: a regularly rotated, salted hash is used in memory to distinguish visits, then discarded. Nobody is tracked across sites and no visitor profiles are built.

Besides page views, the IOC Site Check tool records these events: scan started, scan completed, scan failed, report link copied, PDF downloaded, and clicks on IOC Audit notes. The domain you scan, the report and its score never appear in any of these events.

IOC Site Check scans

A scan downloads one publicly accessible page of the domain you enter. The scanned domain is kept in two places: the report itself, which is stored for at most 30 days and then deleted automatically, and a result cache, which is kept for 24 hours. Reports contain no information about the visitor who ran the scan — no IP address, no browser details.

The rate limits that protect the tool keep IP addresses only as salted hashes, never in raw form, and expired counters are deleted automatically.

Removing a report

Every report page has a “Remove this report” action. It deletes the stored report immediately, and the share link stops working at the same moment. You do not need to wait for the 30-day expiry.

Contact

Questions about this page or your data: hello@ioclabsco.com. Anything about our crawler: abuse@ioclabsco.com — how it identifies itself is documented at /bot.