Privacy

Last updated 30 October 2026

We collect as little personal data as we can. This page lists all of it.

Account holders

• Your email address (to sign you in and send alerts), your name and role if you sign the takedown authorisation, and the IP address it was signed from (as a record of the signature).
• Your team members' email addresses, if you invite them.
• Billing is handled by Dodo Payments or Shopify; we keep only their customer and subscription ids, never card details.

People who report a fake

The address they report, an optional note and an optional email address. These go to the brand they reported it to.

Websites we check

We fetch public pages, product lists and registration records of suspect websites and keep copies as evidence for takedown requests. We don't collect data about those sites' visitors or customers.

Where it is kept, and for how long

On Cloudflare (database and file storage). Account data is kept while you have an account and deleted within 30 days of you deleting it. Unclaimed free scans are deleted after 30 days. Sign-in links expire after 15 minutes; sessions after 30 days.

Who we share it with

Cloudflare (hosting), Resend (email delivery), Dodo Payments or Shopify (billing), and, for a takedown you request, the host, registrar or platform it is sent to, which sees the notice and the signer's name.

No tracking

No advertising cookies or trackers. One cookie keeps you signed in.

Your rights

Ask for a copy of your data, a correction or deletion at support@ballmac.com.