Privacy Policy

Effective Date: March 1, 2026 Last Updated: March 10, 2026

1. Introduction

Melhousen Solutions ("we", "us", "our") operates ConsoleSentinel ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Service.

2. Information We Collect

2.1 Account Information

• Email address
• Name
• Organization name
• Password (stored as scrypt hash, never in plaintext)

2.2 Scan Data

• URLs of websites you scan (only domains you own or are authorized to scan)
• Scan results including detected console errors, performance metrics, SEO issues, accessibility violations, and security exposures
• Scan configuration and scheduling preferences

2.3 Usage Data

• API request logs (method, path, status code, response time)
• Feature usage metrics
• Session duration and frequency

2.4 Technical Data

• IP address (for rate limiting and abuse prevention)
• User agent string
• Browser type and version (when using the web portal)

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Execute scans on your authorized domains
• Generate reports and trend analysis
• Enforce rate limits and prevent abuse
• Improve the Service through aggregate usage analytics
• Communicate service updates and security notices

4. Data Storage and Security

• All data is stored in tenant-isolated databases
• Passwords are hashed using scrypt with random salt
• API keys are stored as SHA-256 hashes only
• Data is encrypted in transit via TLS
• Database backups are encrypted at rest
• Access to production systems is restricted to authorized personnel

5. Data Retention

| Data Type | Retention Period | |-----------|-----------------| | Account data | Until account deletion + 30 days | | Scan results | 90 days (configurable per plan) | | Audit logs | 1 year | | API request logs | 30 days | | Abuse detection logs | 6 months |

6. Data Sharing

We do NOT:

• Sell your personal data to third parties
• Share scan results with other tenants or users
• Use your scan data for advertising
• Provide data to third parties except as required by law

We may share data with:

• Infrastructure providers (Azure) for hosting purposes, under data processing agreements
• Law enforcement when required by valid legal process

7. Your Rights

You have the right to:

• Access your data — request a copy of all data we hold about you
• Correct inaccurate data in your account
• Delete your account and all associated data
• Export your scan results in JSON format
• Restrict processing of your data
• Object to data processing for specific purposes

To exercise these rights, email privacy@consolesentinel.dev.

8. Cookies

The ConsoleSentinel web portal uses:

• Essential cookies: Session management and authentication (required)
• No tracking cookies: We do not use advertising or analytics cookies

9. Children's Privacy

The Service is not intended for use by anyone under 18 years of age. We do not knowingly collect information from children.

10. International Data Transfers

Data may be processed in the United States and other countries where our infrastructure providers operate. We ensure appropriate safeguards are in place for international transfers.

11. Changes to This Policy

We will notify you of material changes via email or in-app notification at least 30 days before changes take effect.

12. Contact

For privacy-related inquiries:

• Email: privacy@consolesentinel.dev
• Address: Melhousen Solutions, Privacy Team

13. Data Protection Officer

For formal data protection requests, contact our DPO at dpo@consolesentinel.dev.