Privacy Policy

What This Covers

This policy covers FanTazTech LLC and the Blindspot scanner at fantaztech.com. Blindspot is not a penetration test. It reads public records only, and it never logs into a system, tests a password, or touches a private network.

What You Give Us

A domain. That is the only thing the free scan requires. There is no account, and you are not asked for a name, a company, or a payment method to run one.

The domain is normalized in your browser before it is sent, so a scheme, a path, or a query string you paste in is removed rather than transmitted.

What the Scan Reads

Only sources that are already public: DNS records, certificate transparency logs, public web responses, domain registration records, and supported breach and infostealer datasets. The full register is on the methodology page.

Where a supported dataset shows that an address at your domain appears in breach data, we report the count and the dates. A password is never displayed to you, never stored for you, and never tested against anything.

What We Do Not Send to Analytics

We measure whether the product works, not who you are. The following never reach general analytics:

• the domain you scanned
• any email address
• the text of a finding, or the evidence behind it
• any credential

What is recorded is the shape of the interaction: that a scan started, whether it completed or failed, the kind of failure, the grade band, and which surface it started from. That is enough to find a broken funnel and not enough to identify a business.

About your IP address. We use Google Analytics, and like any web request, loading it sends your IP address to Google, which uses it to derive an approximate location and then discards it. Google Analytics does not log or store IP addresses. We never attach your IP to a scan, a result, or anything else we hold, and we never receive it in a report. We would rather say this plainly than claim something neater that is not true of how the web works.

Your Result

A free scan result is shown to the person who ran it. We do not publish individual business results, and we do not sell a named result as a page, a screenshot, or a social image. Aggregate and anonymized figures may be used to describe the product.

Cookies and Storage

The domain you enter is kept in your browser session so that moving from a single-check tool to the full scan does not make you type it again. It is cleared when you close the tab.

Google Analytics sets a first-party cookie to tell one visit from another. It holds a random identifier, not a name, an address, or anything you typed. We do not use advertising cookies, we do not run ad personalization, and we do not share analytics data with advertising products.

Children

Blindspot is a business tool and is not directed at children.

Contact

Questions, corrections, or a request to remove something: [email protected]. If you believe a finding about your domain is wrong, we will recheck it at no cost, and a finding that cannot be reproduced is removed.

Changes

When this policy changes materially, the date at the top changes with it. Continued use of the scanner after that date means the updated policy applies.