This Privacy Policy describes how URLERT LLC ("we," "us," or "our") collects, uses, and shares information about you when you use our website (the "Site") referred to as the "Service." While you can use many features of the Service without an account, we also offer account registration for enhanced functionality.
1. Information We Collect
We collect information you provide directly to us.
- Account Information: If you register for an account, we collect your email address and authentication credentials. Passwords are securely hashed before storage; we do not store your actual password.
- Usage Data (Sentry): We use Sentry, an error tracking service, to monitor the performance of the Service and identify and fix bugs. Sentry may collect technical information about your device, browser, and interactions with the Service, including IP addresses, error logs, and stack traces. This data is used solely for debugging and improving the Service.
2. How We Use Your Information
- To Provide the Service: To create and manage your account, and provide the features you request.
- To Improve the Service: To monitor the performance of the Service, identify and fix bugs, and develop new features.
- Comply with Law: If required.
2.1 URL Processing and Data Usage
Website URL Submissions: URLs submitted through our website scanning interface may be displayed publicly on our site and within our Ark Dashboards. These URLs and their scan results will be used to enhance and improve our service, including training our detection systems and identifying emerging threats.
2.2 Tracking Cookies and Affiliate Links
Our Service contains affiliate links to third-party security products. When you click on these links, a tracking cookie may be placed on your device by our affiliate partners. These cookies are used solely to identify that you were referred by URLert so that we may receive a commission on any subsequent purchases.
These cookies typically have a limited duration and do not collect personal identifying information from your device. You can manage or disable cookies through your browser settings at any time. For more information on how we manage these relationships, please see our Affiliate Disclosure.
3. URLert Guard Browser Extension
If you install the URLert Guard browser extension, the following additional data practices apply. These are separate from and supplemental to the general practices described elsewhere in this policy.
3.1 Background Domain Classification
As you navigate the web, URLert Guard automatically sends the domain name of
each website you visit to api.urlert.com in order to retrieve its threat
classification. Only the bare domain (e.g., example.com) is transmitted — no full
URLs, page paths, query parameters, or page content are included in these automatic requests.
Classification results are cached locally in your browser to reduce repeat lookups.
3.2 User-Initiated Page Scans
URLert Guard never captures or transmits page content automatically. Only when you explicitly initiate a scan — via the extension popup or keyboard shortcut — does the extension collect and send the following to our API:
- The full URL of the page being scanned
- The page's HTML source
- A JPEG screenshot of the visible page content
Extension-initiated scans are treated as private and are not displayed publicly on our site. This is distinct from URLs submitted through the URLert website scanning interface (see Section 2.1).
3.3 Anonymous Installation Identifier
Upon installation, URLert Guard generates a random UUID (anonymous installation ID) that is
stored locally and included as a header (X-Urlert-Install-ID) with every request
to our API. This identifier is not linked to your account or personal information. It is used
solely to manage rate limits, detect abuse, and maintain service integrity. It does not track
your identity or browsing across sites.
3.4 Extension Metadata
Requests from the extension also include your browser's extension ID (X-Urlert-Extension-ID) to allow our API to validate that requests originate from the official URLert Guard
extension.
3.5 Extension Data Retention
Domain classification data retrieved by the extension is cached locally on your device and subject to automatic expiry. Data transmitted to our API for user-initiated scans is retained in accordance with the general data retention practices described in this policy.
3.6 Source-Available Code
The client-side source code for URLert Guard is publicly available at github.com/urlert/urlert-guard for inspection and security audit purposes. We believe in "Transparency over Obscurity" — you can verify our privacy claims and audit data handling by reviewing the source code directly. The code is published under a source-available license for viewing only.
4. How We Share Your Information
We do not sell or rent your personal information to third parties. We may share your information in the following limited circumstances:
- Service Providers: We share information with Sentry as described above to provide essential functionality for the Service.
- Legal Requirements: We may disclose your information if required to do so by law or in response to a valid legal request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
5. Data Security
We take reasonable measures to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request that we correct any inaccurate or incomplete information.
- Erasure: Request that we delete your personal information, subject to certain exceptions.
- Restriction: Request that we restrict the processing of your personal information.
- Data Portability: Request a copy of your data in a machine-readable format.
7. Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on the Site with a revised "Last Updated" date. Your continued use of the Service after any such changes constitutes your acceptance of the new Privacy Policy.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at: support@urlert.com