Privacy policy
This policy explains which personal data Accessly processes, why, and for how long.
Last updated: 1 November 2026.
Who is responsible
- 4mazing, Curitiba, Brazil, is the controller of your personal data. Contact: contact@4mazing.io.
- We are based in Brazil. We process personal data under the EU General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).
What we process, why, and for how long
- Free scan. The page address you enter and the scan result. The result can include short HTML samples from the scanned page. These samples can contain personal data that the page already shows in public. Before we store the samples, we replace email addresses with [email removed] and phone numbers with [phone removed]. Why: to run the scan you ask for and show its result (GDPR Article 6(1)(b); LGPD Article 7, V). For the HTML samples: our legitimate interest in giving the site owner a usable result (Article 6(1)(f); LGPD Article 7, IX). How long: 30 days after the scan, or until the site owner deletes the result.
- Full result for a site owner. The email address you enter, used only to send the private link. We do not store the address. We store a salted hash of it, and of its domain, for the limits. Why: to send the link you ask for (Article 6(1)(b); LGPD Article 7, V). How long: the link works for 7 days and is then deleted. The hashes are deleted after 24 hours.
- Waitlist. Your email address, the tiers you chose, and the dates of your sign-up and confirmation. Why: to tell you when the paid tiers are ready, with your consent (Article 6(1)(a); LGPD Article 7, I). How long: we delete a sign-up that nobody confirms after 7 days. We keep a confirmed sign-up until you delete it.
- Abuse protection. Your IP address, and the email address you enter, only as salted hashes. On the scan form and the owner form, Cloudflare Turnstile checks your browser to tell people from bots. We get only a pass or fail answer. Why: our legitimate interest in limiting misuse of the free scan and of our emails (Article 6(1)(f); LGPD Article 7, IX). How long: 24 hours.
- Server logs. Our hosting provider records technical request data, such as your IP address. Why: our legitimate interest in running and protecting the website (Article 6(1)(f); LGPD Article 7, IX). How long: 3 days.
- You do not have to give us your email address. Without it, we cannot add you to the waitlist or send you the private link to a full result. The free scan needs no email address.
Cookies and tracking
- This website sets no cookies and uses no tracking. When you use the scan form or the owner form, Cloudflare's anti-abuse check (Turnstile) stores one item in your browser's local storage, for the domain challenges.cloudflare.com. We do not read it. We count events, such as page views and scans per day, without any data about you. Our emails have no open or click tracking.
Who processes the data for us
- Supabase: the database (EU (Ireland)).
- Cloudflare: hosting of the website, and the anti-abuse check on the forms (Turnstile).
- Resend: sending our emails.
- Google Cloud (Cloud Run, Belgium): running the scan.
- Our providers process data outside Brazil, and some outside the European Economic Area. Where they process personal data outside the European Economic Area, their data processing terms include the European Commission's standard contractual clauses. Cloudflare, Google and Resend also take part in the EU-US Data Privacy Framework.
Your rights
- You have the right to access, correct and delete your personal data, to restrict or object to its processing, and to get it in a portable format. Where we rely on your consent, you can withdraw it at any time. This does not change processing that happened before.
- Under the LGPD, you can also ask us to confirm that we process your data, to tell you with whom we share it, and to anonymise or block data that we do not need.
- Every waitlist email has a link to delete your data. Every full result has a button to delete it.
- We do not store the email address of a site owner, so we cannot find a scan result by an email address. To ask about a scan result, send us the page address.
- To use your rights, write to contact@4mazing.io. You can also complain to a data protection authority: in the EU, the authority of the country where you live or work (list of EU data protection authorities); in Brazil, the ANPD (Agência Nacional de Proteção de Dados).
- We make no automated decisions about you.
Changes
- When we change this policy, we change the date at the top of this page.