Privacy policy
What we collect, and what we don’t.
This policy covers the website at www.weblocksmith.com, the free website check it offers, and the enquiries and payments that follow. It is written to match what the software actually does.
Who we are
Seven Eagles LLC, trading as WebLockSmith, is the controller of the personal data described here. You can reach us at hi@weblocksmith.com.
The free website check
When you submit a website address, your browser removes any path, query, or fragment before sending it, so only the origin (for example https://your-business.com) reaches our server. Our server then:
- resolves the domain through Cloudflare’s public DNS service and refuses private or reserved addresses;
- requests the public homepage, the plain-HTTP address, and the public TLS certificate chain of the website you entered;
- inspects response headers, a bounded sample of the page, the attributes of cookies set on that response (never their values), and the paths of public assets on the page;
- stores the website origin, the job status, and a sanitised report in shared hosting storage so that simultaneous visitors can share one check.
Completed reports expire after five minutes, failed checks after thirty seconds, and queued checks after two minutes. Expired entries are removed as new checks arrive. Page error text and filesystem paths are never copied into a report.
To limit abuse, we may keep a daily-rotating cryptographic digest of the connection identifier alongside a check. Raw IP addresses are not stored in this cache. Our hosting provider processes standard request metadata (such as IP address and user agent) in its own logs under its own policy.
Please only check websites you own or are authorised to check. The check sends ordinary public requests, but you are responsible for how you use it.
Enquiries and email
The enquiry form prepares an email on your device. The details you type are held in your browser’s memory and are not submitted to a WebLockSmith server; refreshing the page clears them. When you choose to open your email app or copy the request, your email provider receives what you entered. We receive it only when you send the email.
We keep emails and the information in them for as long as needed to answer your enquiry, carry out any work you agree to, and meet our legal and accounting obligations. Please do not include passwords, access tokens, private keys, or customer data in an email. If access is needed for accepted work, we agree an appropriate method separately.
Payments
No card details are collected on this website. When work and fees are agreed, payment is handled through Stripe. Stripe processes your card details under its own privacy policy; we see the payment status and the details needed for invoicing, not your full card number. If you buy a fixed-price plan after a free check, Stripe’s checkout asks for your name, email, phone number and website address, and the page passes Stripe the website you checked, its risk level and the plan the check pointed to, so we can match your payment to your check.
When we secure a website, we keep its address, the plan, the date we secured it and any monitoring period, and publish them on a public verification page that the site’s Safety Seal links to. The page names the website, not you. Ask us and we will withdraw the seal and its page.
Third parties
- Vercel hosts the website and runs the checker. Neon provides the PostgreSQL database that holds the short-lived check records.
- Cloudflare answers the public DNS queries made during a check.
- Google Fonts serves this site’s typefaces, so your browser contacts Google to load them. The fonts fall back to system fonts if that fails.
- Stripe processes payments once work is agreed.
This site uses no advertising, third-party analytics, or tracking scripts. While we test two versions of the homepage, it sets one cookie, wls_ab, which holds only the letter A or B so you see the same version on each visit; it expires after 30 days. The homepage also counts, per day, how many visits, website checks and enquiries each version gets. Those counts contain no IP address, cookie value, website address or other identifier. Links to other websites, such as the security advisories we cite, lead to sites with their own policies.
Your rights
Depending on where you live, you may have the right to access, correct, or delete personal data we hold about you, to object to or restrict its processing, and to complain to a supervisory authority. Email hi@weblocksmith.com and we will respond. Check records expire on their own within minutes; enquiry emails can be deleted on request unless we must keep them for legal or accounting reasons.
This website is not directed at children under 16, and we do not knowingly collect their data.
Changes and contact
We will update this page when the software or our practices change, and the date at the top will move with it. Questions about privacy go to hi@weblocksmith.com.