Privacy
Last updated · August 29, 2026
The free tool needs no account and no personal data at all. An account and a Scan Pass purchase each add a small, specific amount.
Free verdicts — no data collected
Checking a tracked plugin's verdict, browsing plugin pages, or calling the JSON API and MCP endpoint requires no account, no cookie-based identity, and no personal data. We log standard web-server request data (IP, user agent, timestamp) for abuse prevention and rate-limiting only.
Accounts (optional)
Creating an account with email and password stores your email address and a salted password hash. "Continue with Google" stores your email and Google account id instead of a password. An account exists only to show your own linked Scan Passes on one page (/dashboard) — it changes nothing about how the free tool or a Scan Pass itself works.
Scan Pass purchases
Payment is processed entirely by Paddle, our payment provider and merchant of record — we never see or store your card details. Paddle shares the transaction id and, if you provided one, the pass token tied to your purchase, so the correct pass can be activated. See Paddle's privacy policy for how Paddle itself handles payment data.
What we scan
The sweep that builds the free tracked set reads only public wordpress.org data: plugin metadata, release notes, and support-forum thread titles/links/timestamps. It never touches your site, your WordPress installation, or anything not already public on wordpress.org.
Data retention and deletion
Account data is kept for as long as the account exists. To delete your account and associated email, contact us at hello@utilityhouse.xyz. Deleting an account does not retroactively invalidate a still-active Scan Pass — the pass link itself continues to work, since it (not the account) is the actual credential.
Third parties
Paddle (payments), Resend (transactional email — password resets only), and Google (optional OAuth sign-in) are the only third parties in this data flow. We do not sell data, and we do not run third-party ad trackers.