Privacy Policy

1. Who is responsible for your data

The data controller is Qcramai Private Limited, Miyapur, Hyderabad, Telangana, India. For any privacy question or request, contact info@qcramai.com (subject line: “Privacy”).

2. What we collect

2.1 When you use the Free Web Scan

The Report is generated about the Scan Target, not about you. It can include: the redirect chain and final URL; TLS handshake and certificate details; HTTP response and security headers; observed cookies set by the Scan Target; a screenshot of the Scan Target as rendered in a headless browser; the page’s network log, console output, and JavaScript-exposed globals; a technology fingerprint; public DNS and email-authentication records; advertised HTTP methods; and reputation/blocklist results. If the Scan Target itself contains personal data (for example names on a rendered page), that data may appear in the Report because you directed a scan at that page.

2.2 When you browse this website

Our host and any CDN process standard server logs (IP address, timestamp, page requested, user-agent, referrer) for security and operations. The marketing site uses [no non-essential cookies / only the cookies listed in section 7]. The scanner issues a same-origin form token to protect against cross-site request forgery; it is not used for tracking or advertising.

2.3 When you contact us

If you use the contact form or email us, we collect the name, email address, and any message content you provide, and keep the correspondence to respond and for our records.

We do not knowingly collect special-category data, and the Free Web Scan is not intended for anyone under 18.

3. Why we use it, and our legal bases

• To provide the Free Web Scan and this site — performance of a contract / taking steps at your request (or our legitimate interest in offering the tool).
• To enforce rate limits and prevent abuse, fraud, and unlawful scanning — our legitimate interests, and compliance with law.
• To secure, monitor, and improve the Services — our legitimate interests.
• To respond to your enquiries — our legitimate interest in answering you, or steps prior to a contract.
• To comply with legal obligations and to establish, exercise, or defend legal claims — legal obligation / legitimate interests.

Where we rely on legitimate interests, we have weighed those against your rights; you may object as described in section 9.

4. Who we share it with

We do not sell personal data or use it for third-party advertising. We share limited data with:

• Hosting and infrastructure providers that run the site and the scanner on our behalf, as processors.
• Third-party reputation and DNS sources. To produce the reputation section of a Report, the Scan Target’s hostname and/or IP address are sent to services such as the Spamhaus DBL/ZEN zones, the Quad9 threat resolver, and — where enabled — abuse.ch (URLhaus / ThreatFox). Public DNS lookups are resolved through standard resolvers. These providers operate under their own privacy terms.
• Professional advisers (legal, accounting, security) under duties of confidentiality.
• Authorities or third parties where we are required by law, or where disclosure is necessary to investigate abuse or protect our rights, users, or the public.
• A successor entity in connection with a merger, acquisition, or asset sale, subject to this policy.

5. How long we keep it

We may keep information longer where needed to comply with law or to establish, exercise, or defend legal claims. Report links are unguessable but are not access-controlled; treat a Report URL as shareable-by-anyone-who-has-it and request deletion if that is a concern.

6. International transfers

Our providers may process data in countries other than yours. Where personal data is transferred out of the UK, EEA, or India, we rely on an adequacy decision or on appropriate safeguards such as Standard Contractual Clauses. Contact us for details.

7. Cookies and similar technologies

[Complete this section to match your actual deployment.] If the site sets only strictly-necessary cookies (such as the scanner’s CSRF form token), say so here and note that no consent banner is required. If you add analytics or embedded media, list each cookie, its provider, purpose, and lifetime, and describe how a visitor can accept or reject non-essential cookies.

8. Your rights

Depending on where you are (for example under the EU/UK GDPR or India’s Digital Personal Data Protection Act 2023), you may have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased, including a Report that concerns a system you operate;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent where we rely on it, without affecting prior processing;
• lodge a complaint with your data-protection authority (in the UK, the ICO; in the EEA, your national authority; in India, the Data Protection Board).

To exercise a right, email info@qcramai.com. We may need to verify your identity, and we will respond within the period required by applicable law.

9. Removing a scan of your system

If you operate a system that someone else scanned and you want the Report removed, email info@qcramai.com with the Report URL or the target host and a way to confirm your association with the system. We will delete qualifying Reports promptly.

10. Security

We use technical and organisational measures appropriate to the risk — including transport encryption, access controls, request-origin and CSRF protections on the scanner, and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy; the “last updated” date reflects the latest version. Material changes will be posted on this page.

12. Contact

Qcramai Private Limited
Miyapur, Hyderabad, Telangana, India
info@qcramai.com
+91 77806 80978