Privacy
Short version: none taken.
This is the whole list. If something is not here, we don't do it.
What the scan does
- Your IP, location, ISP and network are read from the request that loads the page and sent straight back to you by
/api/whoami. Our code does not store or log them. - WebRTC, fingerprint, device and timezone checks run inside your browser. The values never leave it.
- The WebRTC test asks Cloudflare's public STUN server (
stun.cloudflare.com) for your public address — the same thing any web page can do.
What stays on your device
- One
localStoragekey,dm_state: your theme choice and the last verdict of each tool, so the tools grid can show your checklist. Clear it any time in your browser; nothing depends on it. - No cookies. No accounts.
What we don't use
- No Google Analytics, no ad networks, no third-party scripts, no third-party fonts.
- Hosting is Cloudflare, which — like any host — handles your connection and may keep its own edge logs under its policy. We add privacy-friendly, cookieless aggregate page-view statistics through Cloudflare Web Analytics.
How we make money
- Nothing yet. If we add partner links they will be marked directly under the link, will never come before a free fix, and are limited to privacy-aligned providers.
Verify it yourself
Open your browser's developer tools → Network, then reload any page. You should see requests only to digitalmirror.dev (plus the STUN lookup on the WebRTC test). The site's Content-Security-Policy enforces this: the browser refuses to load scripts, styles, fonts or images from anywhere else.