Privacy
Effective: 12 October 2026
Release 1 forensic and message tools process files and text in your browser. Source files are not uploaded to ValidatesOnline servers for those tools.
How the local claim is defined: the selected source content is read by browser JavaScript, Web Workers or browser media APIs. A WebAssembly label is shown only if a specific analyzer genuinely uses it. Interface assets or optional provider checks are not described as source-file uploads.
- OCR tools may download recognition code and language data from jsDelivr. The CDN receives ordinary network information such as your IP address for those downloads; the chosen image is processed by the browser worker.
- The optional encrypted case vault stores cases in your browser’s IndexedDB. Clear site data to remove stored cases. Downloaded exports must be deleted separately from your device.
- Local tools show a privacy badge: processing stays in your browser.
- Password breach checks use Have I Been Pwned k-anonymity — only a 5-character hash prefix is sent, never the password.
- Server checks such as public DNS transmit only the identifier needed for that check and may create ordinary security and access logs.
- We do not sell personal analysis content or use it to sell positive security verdicts.
- Essential storage may preserve interface state on your device. ValidatesOnline does not currently load Google advertising or analytics scripts. An AdSense account verification meta tag identifies the publisher account; it does not request ads or set advertising cookies.
- Before advertising is activated, an applicable consent-management flow and clear cookie controls will be enabled. Ad partners may then process device, cookie, IP, and interaction data under their own policies.
- Locally generated reports remain on your device unless you choose to download, share, or submit them elsewhere.
Requests and contact
For access, correction, deletion, objection, or privacy questions, email support@validatesonline.com. We may need enough information to locate relevant server records and verify the request.