Your information

Privacy Policy

Effective November 14, 2026. SHIPWREKT is operated as a Toasty Media venture. This notice explains the personal information processed through our assessment website and email report service.

Information we process

When you run The Lookout, we process the website address submitted, your authorization confirmation, your IP address for abuse prevention, and technical assessment results. If you request an emailed PDF, we also process the email address you provide, the assessment report, a confirmation token, and the delivery status. Repository assessments process the repository identifier and any access token you voluntarily submit for the request. Do not submit passwords, secrets, or unnecessary personal information.

Why we use it

We use submitted information to run requested assessments, protect the service against abuse, generate reports, verify email ownership, and deliver requested PDFs. We may use information you voluntarily provide when contacting us to respond to your enquiry. We do not use an assessment request as consent to unsolicited marketing.

Storage and retention

The assessment interface may temporarily store a report in your browser so you can view or download it. Email-report requests are temporarily stored in a private directory outside the public website while awaiting confirmation and delivery; confirmation links expire after approximately 30 minutes. Expiry does not necessarily mean immediate file deletion, so residual temporary files may remain until cleaned up. Scanner rate-limiting records may be retained for operational abuse prevention. Access logs and email infrastructure may have separate retention periods. We will update this notice as retention controls are verified and refined.

Sharing and international processing

Our hosting, email, and network providers may process limited information as needed to operate the service. Repository checks may send requests to GitHub. Depending on the services used, data may be processed outside your country. We do not sell submitted assessment data.

Security

We use HTTPS, access restrictions, private report storage, and signed assessment payloads. No online service can guarantee absolute security. Assessment results are not intended to contain sensitive credentials.

Your choices and rights

You can choose not to request an emailed report. You may request access to, correction of, or deletion of personal information we hold, subject to applicable law and necessary operational or legal retention. Contact us to exercise these rights. If you believe we have mishandled your information, you may also contact the relevant data-protection authority.

Contact

For privacy requests, contact hello@toasty.media. See our Terms of Service for assessment scope and limitations.