PaznicPrivacy Policy
Last updated 7 September 2026
Paznic (sole trader) (Paznic, https://paznic.eu) is the data controller for the personal data described here. You can reach us at contact@paznic.eu.
What we collect
Your account. Your email address and an encrypted password, so you can sign in. If you subscribe, our payment provider handles your card details — we never see or store them.
Your websites. The domains you add, proof that you verified them, and the results of every scan we run on them.
Technical logs. Ordinary server logs from our hosting provider, kept briefly for security and debugging.
We do not use advertising trackers, and we do not sell or share your data with anyone for marketing.
Why we are allowed to process it
To provide the service you signed up for (performance of a contract), and to keep the service secure and working (our legitimate interest). Where we rely on consent — for example if we ever send you product news — you can withdraw it at any time.
Scanning is limited to domains you prove you own
Before Paznic scans a domain, you must prove control of it with a DNS record or a file we ask you to publish. Unverified domains are excluded from scanning at the database level, not merely hidden in the interface. Every check is passive: we look at your site the way a visitor's browser does, and never attempt to gain access to it.
The free check on our home page
Anyone can type a domain into the box on our home page and get a score, without an account. We keep the domain that was checked, the score, and a one-way hash of the visitor's IP address — the hash exists only to stop the page being used in bulk, and the address itself is never stored. That check runs the same passive look any visitor's browser performs, and it deliberately returns only a score and a count of issues per category — never the issues themselves, so it cannot be used to map out someone else's website.
Who else processes your data
We use a small number of providers to run the service. Each one only receives what it needs:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and account authentication | European Union (Zurich) |
| Vercel | Website and scanner hosting | European Union (Frankfurt) |
| Resend | Sending alert and report emails | European Union (Ireland) |
| AI language model provider | Turning technical scan findings into plain-language explanations. Receives the domain name and the finding details — never your account credentials. | United States |
Where a provider is outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses.
How long we keep it
Scan results are kept while your account is open, so you can see how your site has changed over time. If you delete your account, we delete your sites, scans and findings within 30 days, except records we must keep for accounting or fraud-prevention law.
Your rights
Under the GDPR you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Email contact@paznic.eu and we will respond within 30 days. If you are unhappy with our answer, you can complain to your national data protection authority — in Romania, the ANSPDCP.
Cookies
We set one cookie, and only after you sign in: the session cookie that keeps you logged in. There are no analytics or advertising cookies, so there is nothing here to consent to.
Changes
If we change this policy in a way that affects you, we will email you before it takes effect.