Privacy Policy

1. Who we are

SpyApp ("we", "us", "our") operates the website spyapp.net and the file, URL, domain and IP scanning service available on it. This Privacy Policy explains what information we collect, how we use it, and the choices you have. If you have questions, contact us at [email protected].

2. Information we collect

We collect the following categories of information:

• Submitted content. Files, URLs, domains and IP addresses you submit for analysis, together with metadata such as file names, sizes and cryptographic hashes.
• Account information (only if you choose to register): email address and a hashed password.
• Community contributions: votes and comments you post on scan result pages.
• Technical data: IP address, browser type, device and operating-system information, referring pages, and timestamps, collected automatically through server logs and cookies.
• Communications: the content of messages you send us through the contact form or by email.

Please do not upload files that contain personal secrets, confidential business data, or other sensitive information you would not want analysed or retained.

3. How we use information

We use the information we collect to:

• Analyse submissions and generate verdicts, scores and detailed reports;
• Maintain a shared threat-intelligence database that benefits all users;
• Operate community features such as voting and comments;
• Improve detection accuracy and develop new features;
• Prevent abuse, fraud and manipulation of scores;
• Respond to your enquiries and provide support;
• Comply with legal obligations.

4. Cookies and similar technologies

We use cookies and similar technologies to keep the site working, remember preferences, understand how the site is used, and — where applicable — to serve advertising.

Advertising cookies. We may display advertising provided by third parties, including Google. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet.

You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising via aboutads.info. Most browsers also let you refuse or delete cookies through their settings.

5. Third-party services

We rely on trusted third parties to operate the service, which may process data on our behalf. These include hosting and infrastructure providers, threat-intelligence partners that help analyse submissions, analytics providers, and advertising partners such as Google AdSense. Each processes data under its own terms and privacy policy. We do not sell your personal information.

6. How we share information

We share information only in these circumstances:

• Public threat data: verdicts, scores, file hashes and indicators of compromise may be published in the shared database. These are tied to the sample, not to your identity.
• Service providers: as described above, under appropriate confidentiality and data-processing terms.
• Legal reasons: when required by law, regulation, legal process, or to protect the rights, property or safety of our users or the public.
• Business transfers: in connection with a merger, acquisition or sale of assets, with notice to affected users.

7. Data retention

We retain submitted samples and derived indicators for as long as they are useful for threat intelligence. Account data is kept while your account is active. Server logs are kept for a limited period for security and diagnostics. You may request deletion of submissions you control (see your rights below).

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. To exercise these rights, email [email protected]. We will respond to verified requests within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

9. Children's privacy

The service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.

10. International transfers

We operate globally, and your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

11. Security

We use technical and organisational measures to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here and update the "Last updated" date. Material changes will be highlighted on the site.

13. Contact us

For any privacy question or request, email [email protected] or use our contact page.