Our Website
This website uses no trackers or cookies. It's built on Cloudflare for speed and security. We're migrating to a precompiled React build, which will eliminate calls to CDNs and further reduce XSS risks.
Trust Centre
Data collection? Not here.
We believe in transparency. This isn't your standard 50-page privacy policy only lawyers understand. Here's our simple promise to you, in plain English.
Privacy First. No Telemetry.
Our Tools & Your Data
HEAT Scanner (1.0 & 2.0)
Both the script (1.0) and app (2.0) collect no information whatsoever. The only two network calls are to 1.1.1.1 (for DNS resolution) and IP-api.com (for Whois lookups). No personal information is ever collected or uploaded.
Would telemetry make our product better? Certainly. But we've decided to build a security app—not a data hoarder.
Defender Hardening Console
No personal information is collected. No network calls are made. Period. The tool operates entirely on your local machine.
ScamGuard
Just like the Defender Console, ScamGuard collects no personal information and makes no network calls. Your security stays on your device.
Hawk Eye Analysis
To provide a secure, personalized service, we use minimal operational cookies (via Cloudflare Auth) to create and manage your account. That's it. No tracking, no analytics, just what's needed to log you in.
Helios Web Marshall
Our browser extension first checks websites against a local database of over one million domains. For sites not in this database, a cloud lookup is performed — the request contains the hostname, page title, and an authentication ID. In some cases, page content may also be included for deeper analysis by our private machine learning model. No data from these requests is stored on our servers or used for model training — it is processed in real time and discarded.
What's stored locally: a cache of recent website verdicts, your preferences (whitelist, notification settings), and an authentication ID for licence validation.
What's not collected: no personally identifiable information, no browsing history, no page content, no cookies, no IP addresses, no analytics, no telemetry. Nothing is shared with third parties.
A million domains checked offline, the rest analysed by a private ML model that doesn't remember you. Processed in real time, then forgotten.