Privacy Policy

Exposure Meter · Last updated: 27 September 2026

Draft — under review by our legal team. It describes how the site actually works today. Items in [brackets] will be finalized after review. This is not legal advice.

The short version

  • The scanner runs in your browser. The text you paste and the files you open are not sent to us.
  • We do not receive your posts, scores, results, or the names you type into the alias field.
  • If you contribute money, Stripe collects your email address and the payment details required by your chosen payment method. We can see your email and the name you give Stripe.
  • If you write to us, we keep your message and email address so we can reply.
  • We don't sell personal information and we don't run advertising or tracking scripts on the scanner.

1. What stays on your device

When you use the scanner, all analysis happens in your browser tab:

  • Text you paste, files you open, and the results you see are processed on your device and discarded when you close or refresh the tab.
  • Names you enter in the "public figures, parties or institutions" field stay in that tab. They are not saved to browser storage.
  • Reports you download are created on your device. By default they contain no raw post text and use a neutral filename. If you choose to include quotes or the logo, that is your choice, and the file is then more sensitive.

We cannot see, recover, or delete any of this, because we never have it.

2. What we collect

Contributions. Contributions are handled by Stripe. Stripe collects your email address and the payment details required by your chosen payment method (for example, card details for a card payment). We receive from Stripe: your email, the name you enter, the amount, the date, and the payment status. We do not receive your full card number. We do not email donors.

Messages to us. If you use "Talk to us" or email us at contactexposuremeter@gmail.com, we receive your email address and whatever you write. Please don't send posts or sensitive personal details in that message.

Organization inquiries and billing. If your organization arranges custom services or invoice billing, we collect the contact details and billing information needed to do that.

Website logs. Our hosting provider, Cloudflare, Inc., may keep standard server logs — such as IP address, time of request, page requested, browser type, and referring page — for security and reliability. These are kept for a limited time under Cloudflare's own policy.

Cookies and storage. We set no cookies. The scanner does not store your text in cookies or local storage. Our hosting provider's security systems may set short-lived security cookies.

3. What we do not collect

We do not collect or receive your social-media accounts, passwords, posts, scan results, scores, matched terms, file contents, contacts, or location. We do not build profiles of users and we do not compare anyone's text with anyone else's.

4. Who we share information with

We use a small number of service providers who handle information only to provide their service to us:

  • Stripe, to process contributions. Stripe's handling of your data is described in its own privacy policy.
  • Cloudflare, Inc., to serve the website.
  • Google (Gmail), to send and receive email.

We do not sell personal information. We do not share it for advertising.

5. Legal requests

We can only be asked to produce what we hold, which is limited to the information in section 2. We cannot produce your posts or scan results because we do not have them. If a legal request seeks information about you, we will notify you before disclosing it unless the law prohibits us from doing so or there is an emergency.

6. How long we keep information

  • Contribution records: 7 years, per tax rules.
  • Messages to us: 2 years after the conversation ends.
  • Server logs: kept for a limited time under our hosting provider's policy.

We delete or anonymize information when it is no longer needed.

7. Your choices

Depending on where you live, you may have the right to ask us to tell you what we hold about you, correct it, delete it, or stop using it. Write to contactexposuremeter@gmail.com. We may need to confirm it's you before we act. Because we hold so little, our answer will usually be short.

8. Protecting yourself

Keeping analysis on your device removes one risk, but it doesn't remove all of them:

  • Malware or a compromised device can read your files and screen.
  • Browser extensions can see what is on a page.
  • On a shared computer, your browser history and download list may reveal that you visited this site or saved a report.
  • A saved report, even with a neutral name, is a sensitive file. Delete it when you no longer need it.
  • A payment leaves a record with your payment provider and your bank.

9. Children

The scanner is not directed at children under 13, or under 16 where that is the local age. We do not knowingly collect information from them.

10. International use

We are based in North Carolina, USA. The United States has no single federal privacy law; some states (notably California) have their own. Because we collect so little, most of these obligations do not arise in practice. Our providers — Stripe, Cloudflare, and Google — process information under their own published compliance frameworks, which include the EU-U.S. Data Privacy Framework and standard contractual clauses. We rely on those frameworks and do not operate separate cross-border transfer mechanisms, consistent with the limited information described in section 2.

11. Changes to this policy

If we change this policy in a way that matters, we will update the date above and describe the change on this page. Significant changes will also be noted on the home page.

12. Contact

Exposure Meter
contactexposuremeter@gmail.com