Privacy Policy
Last updated: 2026-05-21
Overview
Signal Guardian is an informational privacy intelligence tool. You upload data exports you already own (Google Takeout, Meta DYI, Amazon Order History) and the app produces an exposure report. The app does not access your accounts, scrape services, or monitor you in the background.
What we receive
Data export archives you upload (.zip, .json, .csv, .txt). A random session_id stored in your browser's sessionStorage. Optional: dispute notes, action progress, account email if you create one.
What we process
The server temporarily reads each upload to compute aggregates — counts, topic buckets, category mix, freshness. These aggregates power your report.
What we do NOT collect
No raw search queries, item titles, advertiser lists, or message contents are persisted. No advertising IDs, device fingerprints, or third-party analytics. No tracking pixels, no ad SDKs, no background scraping. No silent access to any platform account.
Upload handling
Uploads stream to a temporary location, are size-capped, scanned for zip-slip / zip-bomb patterns, parsed, and deleted in a finally block — on success and on failure.
Reports & session storage
Reports live in the database for at most SESSION_TTL_DAYS (default 7 days). A background loop purges expired sessions. The session_id in your browser is cleared when the tab closes.
Optional services
Sentry (error telemetry, PII off, traces 0%), Stripe (billing only), Supabase (optional auth). All off by default. The app's core demo works without any of them.
Your rights
Download your report as JSON or PDF. Click 'Delete my data' in the Report tab to remove session, uploads, reports, actions, disputes, alerts and trends in one call. You can also call DELETE /api/session/{id} directly.
Limits
Signal Guardian provides estimates based on the data you upload. It is not legal advice, cybersecurity certification, financial advice, forensic verification, or a guarantee of privacy protection.
Contact
Open a private issue on the project repository, or use the contact channel published with the deployment.
Signal Guardian provides informational privacy analysis based on user-provided data. It is not legal advice, cybersecurity certification, financial advice, forensic verification, or a guarantee of privacy protection.