Legal
Privacy Policy
Last updated September 2026
What DotCensus collects, why, and what you control — for you as a customer, and for the visitors to the websites you run it on. The second part matters more, and is where most consent vendors are vaguest.
About your visitors
A consent record holds a pseudonymous subject key, a timestamp, the region and policy pack, the banner and manifest versions, what was granted and denied, any framework strings, any browser privacy signal and a proof hash. It does not hold a name, an email address or a durable cross-site profile.
IP addresses
We do not retain raw visitor IP addresses as a durable record. An address may be processed transiently for coarse regional routing and for abuse prevention, and where that happens the retention and transformation are disclosed rather than described as "we never process IP addresses" — which would be untrue of any service that answers an HTTP request.
About you as a customer
Account details, the sites you add, your configuration, scan results and ordinary operational logs. Marketing enquiries and scan requests sent through this website reach us by email and are kept separate from product data.
Scan data
A scan records what a public page loads: requests, cookies, storage keys and embedded services. It is data about your website, not about the people visiting it, and retention for scan artifacts is configurable.
Where it is stored
Customer configuration, visitor consent evidence and scanner artifacts are separate stores with separate access. Regional storage options are on the roadmap; the standards page states what is available today rather than what is intended.
Your control
Export your configuration and evidence at any time, correct it, or ask us to delete your account. Retention for receipts is configurable, because evidence has a longer useful life than a log line and a shorter one than forever.
Security
Encryption in transit and at rest, tenant isolation with per-object authorization, isolated scanner workers with SSRF protections, and an audit trail of material changes. Suspected vulnerabilities can be reported to [email protected] and reach a human.
This is placeholder legal copy for the marketing site. Replace it with your reviewed Terms & Privacy before launch.