Effective Date: January 27, 2026 Last Updated: July 10, 2026
Introduction
squirrelscan is operated by Nineprimes Pty Ltd, trading as squirrelscan ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our CLI tool, our cloud services, and our website at squirrelscan.com.
Information we collect
CLI tool
The squirrelscan CLI tool operates locally on your machine. We collect:
- Minimal usage traces: Counts of audit and update invocations
- Install identifier: A random install ID stored locally to prevent double-counting
- Optional account identifier: If you authenticate the CLI, we associate events with your account ID
We do not collect:
- The websites you audit locally
- Your local audit results or reports
- Any local audit content or page data
- Personal data beyond an optional account ID when you authenticate the CLI
Website
When you visit our website, we may collect:
- Contact information: Email address if you subscribe to updates or submit feedback
- Usage data: Pages visited, time spent, referring website (via analytics)
Account data
When you create an account, we collect the information needed to identify and authenticate you, such as your name and email address. Accounts are managed through our authentication provider, Clerk.
Payment data
When you purchase credits or a subscription, payment is processed by our payment provider, Stripe. Stripe handles your card details. We do not store your full card numbers. We keep records of your transactions, such as amounts and dates, for billing and accounting.
Cloud audit data
When you run a cloud audit, we crawl the websites you ask us to audit and temporarily store page content and metadata from those sites so that we can analyse them and generate your report. You are responsible for ensuring you are authorised to audit any website you submit.
Published reports
If you choose to publish a report, whether public or unlisted, the report and its contents are stored and made available at the access level you select. You control whether a report is published and who can reach it.
Support requests
If you contact us for support or send feedback, we collect the information you provide, such as your email address and the contents of your message, so that we can respond and improve the Service.
How we use your information
We use collected information to:
- Provide and operate the CLI tool and cloud services
- Run the audits you request and generate your reports
- Process payments and manage your account and credits
- Improve the Service and fix bugs
- Send product updates (if subscribed)
- Respond to feedback and support requests
- Understand how our website and Service are used
- Meet our legal and accounting obligations
Third-party services and processors
We use a small number of trusted service providers to operate the Service. These providers process data on our behalf.
Authentication
We use Clerk to manage accounts and authentication, including your name and email address.
Payments
We use Stripe to process payments. Stripe handles your card details directly. We do not store full card numbers.
Hosting and infrastructure
We host the Service and store data on Cloudflare infrastructure.
Analytics
We use Google Analytics and PostHog to understand website and product usage: pages visited, referring sites, and product events like downloads and sign-ups. These services may set cookies and collect your IP address and browser details. We do not sell this data or use it for advertising.
If you subscribe to updates, your email is stored securely and used only for squirrelscan communications. You can unsubscribe at any time.
Cross-border disclosure
We are based in Australia, and some of our service providers are located overseas. In particular, our infrastructure runs on Cloudflare, and providers such as Clerk, Stripe, and our analytics providers are based in the United States. This means your information may be stored or processed outside Australia. We take reasonable steps to ensure these providers handle your information consistently with this policy and with applicable privacy law.
Data retention
- CLI traces: Stored as aggregate event records (audit/update counts) without audit content
- Cloud audit data: Page content collected for an audit is retained only as long as needed to generate and serve your report, then removed or superseded
- Published reports: Retained until you unpublish or delete them, or close your account
- Account and billing records: Retained while your account is active and for as long as required for legal and accounting purposes
- Email subscriptions: Retained until you unsubscribe
- Feedback and support: Retained as long as relevant for product improvement and support
Your rights
You have the right to:
- Opt-out: Disable CLI telemetry by setting
NO_TELEMETRY=1(any value works) - Unsubscribe: Remove your email from our mailing list at any time
- Delete: Request deletion of any data we hold about you
- Access: Request a copy of any personal data we have
- Correct: Ask us to correct information that is inaccurate or out of date
Australian Privacy Act
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This includes collecting only the information we need, using and disclosing it only for the purposes described in this policy or as permitted by law, keeping it secure, and giving you access to and correction of your information on request.
If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Security
We implement appropriate security measures to protect your information. The CLI tool does not transmit sensitive data, our cloud services and website use HTTPS encryption, and access to account and audit data is restricted.
Children's privacy
Our services are not intended for children under 13. We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.
Contact us
If you have questions about this privacy policy:
Email: privacy at squirrelscan.com GitHub: github.com/squirrelscan/squirrelscan
See also our Terms of Service.
This is a beta product. Privacy practices may evolve as we develop squirrelscan.