[LEGAL ENTITY OR YOUR NAME] (“we”, “us”), operator of the Guard Score website and publisher of the Verified Changes / Guard Score open-source tools.
The short version: Guard Score is built so your data stays with you. The command-line tool runs entirely on your machine. The website scanner runs entirely in your browser. We do not receive, store, or transmit your database schema, rules, source code, or scan results. We have no user accounts and we do not sell data.
The command-line tool
Runs locally on your computer or CI. Your migrations, rules, schema, and results never leave the machine it runs on.
It reports counts and findings, not your data.
It contains no telemetry, analytics, or “phone-home.” It makes no network calls except the package-manager download when you install it.
The website (scanner and badge)
The scanner runs in your browser. Schema or rules you paste are analyzed locally in the page; the content is not sent to our servers.
No tracking or advertising cookies. The page may store a single non-identifying theme preference (light/dark) in your browser’s local storage; it never leaves your browser.
Hosting logs. The site and the Guard Score badge image are served by our hosting provider ([HOSTING PROVIDER, e.g. Vercel]), which — like any web host — records standard technical request logs (IP address, timestamp, user-agent, requested URL) to deliver the page and protect against abuse. We use these only to operate and secure the service.
The badge encodes only a numeric score you chose to display; we do not track who views it.
Analytics. We currently use no third-party analytics.
What we do NOT collect
No accounts, names, passwords, or profiles.
No database schemas, rules, source code, secrets, or scan results.
No payment information; no advertising identifiers.
Your rights
Because we do not hold personal data about you, there is generally nothing for us to access, correct, or delete. Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA) you may have rights over personal data; we will honor applicable requests to the extent any such data exists. Contact [CONTACT EMAIL].
Children
The service is not directed to children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their data.
Changes
We may update this policy as the product evolves (in particular when an account-based product launches, which will collect and store data and require a fuller policy). We will update the effective date above when we do.