Updated 28 August 2026

Privacy

ShipSafe checks whether your product is ready to launch in India, which means it would be indefensible for this page to be vague. So here is the whole picture, in the order that matters: what leaves your browser, what we keep, and for how long.

What ShipSafe collects

There is no account, no signup and no email field, so there is no profile to collect. Three things do pass through the service:

  • The URL you submit for a scan. It is sent to our server, which fetches that address and reads the returned pages. The URL is used to run the scan and is not written to any database.
  • Your IP address, transiently. Scans trigger outbound network requests, so the endpoint is rate limited to ten scans per minute. That counter lives in the server process memory, keyed by IP. It is never written to disk and disappears when the process restarts.
  • Your WhatsApp number, if you use the WhatsApp bot. Messages reach us through Twilio, which is the sender of record. We read the number in order to reply to you and do not store it.

What stays in your browser

Two things are stored locally on your device and are never transmitted to us:

  • localStorage holds your light or dark theme choice, so the page does not flash the wrong theme on your next visit.
  • sessionStorage holds your most recent scan result, so the results page can render without re-running the scan. It is cleared when you close the tab.

What ShipSafe does not do

No analytics, no tracking pixels, no advertising identifiers, no behavioural profiling and no third-party scripts on the page. The site sets no tracking cookies. There is no database of past scans, which also means we cannot show you your scan history, and that tradeoff was deliberate.

Who else is involved

  • Vercel hosts the site and, as any host does, processes request logs on our behalf.
  • Twilio carries WhatsApp messages, and only if you choose to use that route.
  • GitHubis queried for this repository’s public star count, and for repository contents when you scan a GitHub URL.

Google Fonts are self-hosted through Next.js at build time, so loading a page does not send a request to Google.

Your rights under the DPDP Act

India’s Digital Personal Data Protection Act, 2023 gives you rights of access, correction, erasure and grievance redressal over your personal data. Because ShipSafe keeps no account and stores no scan history, there is in practice no stored personal data of yours for us to produce, correct or erase. If you believe we hold something about you, write to the address below and we will answer.

Grievance contact

Aditya Bikram Dash, at abdash1994@gmail.com. Expect a reply within seven working days.

Changes

If this policy changes, the date at the top of this page changes with it. The revision history is public in the repository, so you can see exactly what moved and when.