Privacy Policy

Last updated: July 30, 2026

This Privacy Policy describes how VerifyFiltering, a service of CleanBrowsing Inc. ("we", "us"), collects, uses, and shares information when you use verifyfiltering.com and the VerifyFiltering monitoring service.

Information We Collect

• Scan data. When you request a PDF report after running a free scan, we record the public IP address of the network tested, the compliance profile or categories selected, and the per-category results, so we can generate and email your report. Running a scan without requesting a report does not store this information — except that, for abuse prevention, we log the IP address of any request that is rejected for exceeding a rate limit or failing a security check, whether or not a report is ever requested.
• Report request details. If you request a PDF report, we collect the details you enter in the request form: name, company name, email and phone, postal address (street, city, state/province, country), whether you currently use a filtering service, and — separately — whether you'd like to receive marketing communications from us.
• Account data. If you create an account, we collect your email address, name, and authentication credentials (or your Google account identifier, if you sign up with Google).
• Billing data. Payments are processed by Stripe. We do not store your card details; we retain your subscription plan, billing status, and invoice history.
• Device monitoring data. If you subscribe and install the vf-agent, we collect device identifiers, scan schedules, and scan results for the devices you enroll.

How We Use Information

• To run scans, generate reports, and operate your dashboard.
• To deliver the PDF report you requested and, if you consent, to contact you about our products and services.
• To process subscriptions, send invoices, and provide support.
• To monitor for abuse and keep the service secure.

Cookies & Local Storage

We use strictly necessary cookies for login sessions and local storage to remember preferences such as your light/dark theme choice. verifyfiltering.com uses Plausible Analytics, a cookie-free analytics service, to measure aggregate site traffic; it does not track individual visitors. We do not use third-party advertising cookies.

Sharing

We do not sell your personal information. We share data only with:

• Stripe, to process payments.
• Mailgun, to deliver report and account emails.
• Plausible Analytics, for aggregate, cookie-free traffic measurement.
• Service providers that host our infrastructure, under confidentiality obligations.
• Authorities, where required by law.

Data Retention

Report-request details (name, company, contact and address information) are retained indefinitely so we can respond to support requests and maintain a record of reports issued; we do not currently have an automatic deletion schedule for this data. Device monitoring data is pruned automatically: raw per-domain scan results after 30 days, category-level scan summaries after 90 days, and alert delivery history after 90 days. Account and subscription data are retained while your account is active. Cancelling your subscription ends dashboard access immediately; it does not delete your account or its data — see Your Rights, below, to request deletion.

Legal Basis for Processing

Where the GDPR applies, we process your information on these bases: performance of a contract (running scans, generating reports, operating your dashboard), our legitimate interests (fraud and abuse prevention, keeping the service secure), your consent (marketing communications, which you may withdraw at any time), and compliance with legal obligations (billing records, responding to lawful requests).

International Transfers

We are based in the United States, and your information may be processed in the United States and other countries where we or our service providers operate.

Your Rights

Depending on your location, you may have rights under data protection law — including the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA) — to access, correct, export, restrict, object to, or delete your personal information, and to withdraw consent at any time. We do not sell personal information, and we do not share it for cross-context behavioral advertising as defined under CCPA/CPRA. To exercise your rights, contact us at the address below; we will respond within the timeframe required by applicable law (generally within one month under GDPR, or 45 days under CCPA). Business customers needing a Data Processing Agreement should also contact us.

Children

The service is intended for organizations and network administrators, not children. We do not knowingly collect personal information from anyone under 13 (or under 16 in the European Economic Area and UK, where applicable). If we learn we have collected personal information from a child in violation of applicable law, we will delete it. A parent or guardian who believes we may hold such information should contact us at the address below.

Changes

We may update this policy from time to time. We will post the revised version here and update the "Last updated" date above.

Contact

Questions about this policy: support@noc.org.