Privacy Policy

Scope of this policy

This policy applies to the CloneSentry website, free scan flow, report unlock flow, launch-stage product pages, support inbox, and related communications.

CloneSentry scans public web, domain, search, and advertising signals for brand-protection purposes. The service is built for business and founder use, not for collecting consumer profile data.

Information you provide

We collect scan inputs such as brand name, primary domain, category, keywords, known variants, and the email address used to unlock or receive a report.

If you contact support, we collect the information you include in the message, such as your email address, request type, and any files or context you choose to send. Do not send passwords, payment card details, private customer lists, or private legal files unless we have specifically asked for a secure transfer path.

Scan and evidence data

To generate a report, CloneSentry may create domain variants, check whether domains resolve, inspect public webpages, capture public screenshots, extract page titles and visible page text, record host or registrar signals, and store risk-scoring reasons.

Evidence is used to help you review whether a potential clone, lookalike, ad, search result, or other public signal deserves monitoring or an enforcement route. Evidence can include public third-party webpage content because the product purpose is to document public brand-confusion signals.

Attribution and analytics

We store non-secret campaign attribution such as UTM parameters and allowed click identifiers when present. The current implementation allowlists campaign keys and drops unknown query fields, email-like values, and full query strings.

At launch, CloneSentry uses first-party attribution capture in the browser and sanitized attribution in scan requests. Third-party analytics, ad pixels, and conversion tags are loaded only when the destination account and data policy are configured for CloneSentry.

Analytics should measure product and campaign performance, not the contents of private legal notices. We do not intentionally send email addresses, notice body text, screenshots, or private evidence files to third-party analytics destinations.

How we use information

We use information to run scans, generate lookalike-domain variants, score potential clone risk, prepare report links, assemble evidence rows, provide support, debug the service, prevent abuse, and improve launch attribution.

We may use aggregated or de-identified operational data to understand feature performance, scan quality, and campaign performance.

Data we try not to collect

CloneSentry does not intentionally collect passwords, payment details, customer lists, private legal files, private customer communications, or government identifiers in the free scan flow.

If you accidentally send sensitive information to support, contact us so we can review deletion options. We may need to retain minimal records when required for security, billing, dispute, or legal compliance.

Cookies and local storage

CloneSentry may use browser storage such as sessionStorage to keep allowed attribution values during a visit. This helps connect a scan request to the campaign that brought the visitor to the site.

If authentication, billing, or analytics providers are added, their cookies or storage may be used only as needed for sign-in, payments, security, product analytics, or conversion measurement.

Service providers

We may use service providers for hosting, storage, email delivery, payments, analytics, support, security, and scan infrastructure. These providers process information for CloneSentry so the service can operate.

Payment details, when paid plans are active, are handled by the payment provider rather than stored directly by CloneSentry.

Retention

We retain scan inputs, report records, evidence metadata, support messages, and operational logs for as long as needed to provide the service, troubleshoot issues, prevent abuse, satisfy accounting or legal obligations, and support customer requests.

Free-scan and launch-stage records may be retained while the product is being evaluated so reports can be reopened and evidence can be compared over time. You can request deletion using the contact path below.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate for a launch-stage product. No internet service can guarantee perfect security.

Access to production systems, provider accounts, and irreversible actions is gated. CloneSentry does not auto-send complaints or make provider account changes without explicit approval.

Your choices

You can request access, correction, deletion, or support review by emailing the support address below. We may need enough information to verify the request and locate the relevant scan or report.

You can avoid campaign attribution by visiting without campaign parameters or clearing browser storage before starting a scan.

Children

CloneSentry is intended for business users and is not directed to children.

Changes

We may update this policy as the product, providers, or legal requirements change. The updated date at the top of the page shows the current version.

Contact

Privacy, deletion, and data-handling questions can be sent to support@clonesentry.com.