Privacy Policy
Last updated: September 24, 2026
Information we collect
When you create a free account, we collect your email address and any domains or hosts you submit for scanning. If you use the Cipherscan CLI to scan private infrastructure, we collect only the scan results you choose to upload: host identifiers, negotiated algorithms, and pass or fail status.
How we use information
We use account and scan information to operate the Cipherscan dashboard, show you readiness results over time, and communicate with you about your account. We do not sell your data to third parties.
What scans do not collect
Cipherscan reads negotiated TLS handshake parameters only. It does not access application data, file systems, credentials, or traffic payloads, and does not upload traffic contents from CLI scans.
Data sharing
We do not share your account or scan data with third parties except where required to operate the service (such as cloud infrastructure providers) or where required by law.
Data security
We use encryption in transit and at rest, and follow standard security practices for handling customer data.
Data retention
Scan results are retained for as long as your account remains active. You may request deletion of your account and associated data at any time by contacting us.
Your rights
Depending on your location, you may have rights to access, correct, or delete your personal data. Contact us to exercise these rights.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date on this page.
Contact
Questions about this policy can be directed to the Ciphersound team through the Contact page.