The URL you scan, the scan result and the time of the scan.
If you sign up: your email address, and a session record that keeps you signed in.
Page-view counts: per day, page and referrer host, split into humans and bots. These are anonymous totals; no IP address, user id or session id is attached to them.
What we do not store
No IP addresses are written to disk. To limit anonymous scans, your IP is held in server memory for up to 24 hours and never saved.
No analytics cookies. The only cookie is the sign-in session cookie, set when you sign in.
No third-party scripts, trackers or ads.
Retention
Scans are kept until deleted. Deleting your account removes the account and its sessions; your past scans stay as anonymous report links.