Privacy policy

Louis WP Scan ("we", "us", or "the service") is a non profit initiative available at https://louiswpscan.org. We respect your privacy and we are committed to protecting your personal data. This policy explains what we collect, why, and the rights you have under the European Union General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller for this service is the Louis WP Scan project. If you have any question about this policy or about your data, you can contact us at contact@louiswpscan.org.

2. What we collect and why

We follow the principle of data minimisation. We only collect what is needed to run the service.

• Scan data. When you scan a website we store the address you entered, the date and time of the scan, and a short summary of the result, such as the number of issues found and the security grade. We do not store the full content of your website or any login details.
• Contact data. If you use the contact form, we store the name, email address, subject and message you provide, so that we can reply to you.
• Analytics data. With your consent only, we use Google Analytics to understand how the service is used so we can improve it. This may include anonymised usage data such as pages visited and approximate region.

3. Legal basis for processing

• Legitimate interest for running the scan you requested and keeping basic summary records to operate and improve the service.
• Consent for analytics cookies. These are switched off until you accept them, and you can withdraw your consent at any time.
• Consent and legitimate interest for replying to messages you send us through the contact form.

4. Cookies and analytics

We use a small number of strictly necessary cookies that are required for the website to work, for example to keep your chosen language and to protect forms against abuse. These do not require consent.

We also use Google Analytics, but only after you click Accept on our cookie banner. Until then, no analytics cookies are set and no analytics scripts are loaded. You can change your decision at any time using the Cookie settings link in the footer.

Our analytics identifier: G-DLZQP04QXJ

5. How long we keep your data

Scan summary records are kept only as long as needed to operate the service and may be deleted periodically. Contact messages are kept only as long as needed to handle your request. Analytics data follows the retention period set in Google Analytics.

6. Who we share data with

We do not sell your data and we never will. We share data only with the service providers needed to run the site, such as our hosting provider and, where you consented, Google Analytics. These providers act on our instructions.

7. International transfers

Some providers, such as Google, may process data outside the European Economic Area. Where this happens, the transfer is covered by appropriate safeguards such as the European Commission standard contractual clauses.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• ask us to correct data that is wrong
• ask us to delete your data
• object to or restrict how we process your data
• withdraw consent at any time, for example for analytics
• lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at contact@louiswpscan.org. We will respond within the time limits set by law.

9. Scanning other people websites

This service is meant to help website owners check their own sites. Only scan a website that you own or that you have permission to test.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be made clear on this page.