Last updated: July 2026
Malinois (malinois.app) is a solo-operated security check-up service. This policy explains what we collect, why, and how it's handled.
| Data | When | Why |
|---|---|---|
| Email address | You request a report, join the waitlist, or subscribe | Send reports/alerts, account access |
| The URL/host you submit | You run a scan | Perform the check, show you the result |
| Scan findings | A scan runs | Show you the report; secrets are stored masked, never in raw form |
| IP address, country (approximate) | Any request | Abuse/rate-limit protection |
| Language preference | Any request | Show the site in your language |
We do not store raw secrets or credentials found during a scan — only a masked form (e.g. sk_live_…ab12) sufficient to show you what was found.
Paid subscriptions are processed by Polar, our payment provider and merchant of record. We never see or store your card details — Polar handles payment collection, tax, and billing directly. We only receive your email and subscription status from Polar to provision your account.
We use a small number of service providers to run Malinois, each only for the purpose below:
We do not sell your data, and we do not share it with anyone else for marketing purposes.
We publish aggregate, anonymized statistics about security trends across scanned apps (e.g. "X% of apps had an exposed key this week"). These aggregates never include a host, URL, or anything that identifies a specific app or person, and we never publish a breakdown covering fewer than 5 apps.
We keep scan history for as long as your account is active so you can see your monitoring history. If you delete your account, we remove your personal data within a reasonable time, except where we're required to keep records for legal or tax reasons (e.g. billing records via Polar).
We apply standard security headers and access controls throughout the service, and our own scanner is regularly run against our own site (dogfooding). No system is perfectly secure — if you believe you've found a vulnerability in Malinois itself, please email us.
We may update this policy as the service evolves. Material changes will be reflected here with an updated date.