Privacy Policy

Last updated: 2 July 2026

Who we are

SecScan (“we”, “us”) is a website security scanning service operated by DZZD MARKET PULSE, registered in Bulgaria (VAT No. BG181450814), registered office Oborishte St., Burgas, Bulgaria. DZZD MARKET PULSE is the data controller for personal data processed via mysecscan.com. For any privacy matter, contact paul@mysecscan.com.

Scope

This policy covers mysecscan.com, its free security checkers, and the full-scan pilot request.

What we collect

• Scan inputs — the domain or URL you submit to a checker.
• Technical data — your IP address, browser user-agent, and the timestamp of your request (logged for security, abuse prevention, and rate-limiting).
• Full-scan requests — if you request a full scan, the email address and domain you provide.
• Analytics — Google Analytics 4 (GA4), to understand aggregate usage. GA4 sets cookies and processes usage data; IP addresses are anonymized or truncated where supported.
• We do not require an account to use the public tools, and we do not knowingly collect special-category data.

Why we process it and legal basis (GDPR Art. 6)

• Running the scan you requested — Art. 6(1)(b) (service you asked for) or (f) legitimate interest.
• Security, abuse prevention, rate-limiting (IP, user-agent) — Art. 6(1)(f) legitimate interest.
• Responding to full-scan requests — Art. 6(1)(b).
• Analytics — Art. 6(1)(f) or consent where required.

Scan results

Reports are generated for the domain you submit and are served privately (results are marked noindex and are not stored for public access). We do not sell scan data or publish per-domain results.

Sharing and processors

We do not sell personal data. We share it only with service providers who process it on our behalf (hosting, Google Analytics 4), under data-processing agreements. Because we use Google Analytics 4, some data is processed by Google outside the EU/EEA; such transfers rely on Standard Contractual Clauses and the EU–US Data Privacy Framework.

Retention

Technical logs are retained for 90 days; full-scan request data until the request is handled and for a reasonable follow-up period, then deleted.

Your rights (GDPR)

You have the right to access, rectify, erase, restrict, or object to processing, and to data portability. You may withdraw consent at any time. To exercise these, email paul@mysecscan.com. You may also lodge a complaint with the Bulgarian supervisory authority — the Commission for Personal Data Protection (CPDP), cpdp.bg.

Cookies

Essential cookies are used for core operation, and Google Analytics 4 sets analytics cookies subject to your consent via the cookie banner.

Changes

We may update this policy; the “last updated” date reflects the current version. Questions: paul@mysecscan.com.