Privacy Policy

This policy explains what personal data Magekwik processes and why, under the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). We keep it deliberately concrete — the same honesty we hold our reports to.

1. What we collect

• The URL you submit and the scan results derived from it. Scans are persisted so the report is reachable at its permalink and may appear on the public “recent scans” list. A submitted URL is not personal data in itself, but treat it as public.
• Your IP address, used transiently for rate-limiting and abuse prevention, and recorded against an email confirmation as proof of consent.
• Your email address, only if you ask us to email a report or you sign up for change-detection monitoring. Both are double opt-in: we send one confirmation link and nothing further until you click it.

We do not run advertising trackers, and we do not sell or share personal data with third parties for their own marketing.

2. Lawful basis

• Running a scan & abuse prevention — legitimate interests (operating and protecting the service).
• Emailing a report & monitoring alerts — consent, captured via double opt-in and revocable at any time.

3. Email & your consent trail

When you request a report by email we store the address, a one-time confirmation token, the time and IP of the request, and the lawful basis (consent). The report itself is only sent after you confirm. Monitoring alerts work the same way. You can withdraw consent at any time using the unsubscribe link in any monitoring email, or by contacting us.

4. Cookies (PECR)

Magekwik sets only what is strictly necessary to operate the site (for example, the session and CSRF-protection cookie). These are exempt from the consent requirement under PECR because they are essential to a service you actively requested. We set no analytics or advertising cookies.

5. Retention

• Scan records — retained to keep permalinks working; ask us to delete a specific scan and we will.
• Email & consent records — retained while a monitor is active or a report request is outstanding, and for a reasonable period afterwards as a record of consent, then deleted.

6. Your rights

Under the UK GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interests. To exercise any of these, contact support@magekwik.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Processors

We use a reputable email delivery provider to send confirmation, report, and alert emails, and a hosting provider to run the service. These act as our processors under contract and only process data on our instructions.

8. Contact

Data protection enquiries: support@magekwik.com.