Privacy policy

Last updated 2 September 2026

This page describes what numberz collects, why, how long it keeps it, and who else can see it. It is written to match what the software actually does. Where something changes, this page changes with it.

What you can do without telling us anything

You can run a report or use any of the tools without an account. A report run while signed out is shown to you and then discarded; it is not stored, and neither is the address you asked about, beyond the ordinary server logs described below.

What we collect if you create an account

• Your name and email address, which you give us when you sign up. The email address is how you sign in and where we send a link to confirm the address or reset your password.
• Your password, which we never store. We keep a hash of it made with Argon2id, which cannot be turned back into the password.
• Reports you run while signed in — the address you asked about and what the report found — so you can come back to them, compare a page against itself later, and delete them when you no longer want them. A report is private to you unless you choose to share it, in which case it is reachable by anyone holding its link.
• API keys, if you create any. The key itself is shown to you once and stored only as a SHA-256 hash, so it cannot be recovered from our database.
• Two-factor secrets and recovery codes, if you turn on two-factor sign-in. Recovery codes are stored hashed, the same way as a password.

Payments

If you buy a plan, the payment itself is handled by Stripe or PayPal on their own pages. Your card number, bank details and billing address go to them, not to us; we never see or store them. What we keep is the record needed to run your account and to account for the money: the amount, currency, an invoice number, the processor's reference for the transaction, and whether any of it was refunded.

Cookies

numberz sets one cookie of its own, numberz_session, when you sign in. It identifies your session and nothing else, is marked HttpOnly and Secure, and expires after fourteen days without activity or when you sign out. It is strictly necessary for signing in to work, and there is no tracking or advertising purpose behind it.

If advertising is shown on this site, it is served by Google AdSense, and Google may set its own cookies to measure and personalise ads. That is Google's processing, described in Google's advertising policy, and you can control it through your Google ad settings. We do not run any other analytics or tracking scripts.

Server logs and abuse prevention

Like almost every website, the server in front of numberz keeps an access log: the address a request came from, what was requested, and when. Those logs are rotated automatically and old ones are discarded; they are read only to diagnose faults or investigate abuse. Separately, the application counts sign-in attempts per address, in memory, to slow down password guessing. Those counts are never written to disk.

Who else sees your data

• Cloudflare sits in front of the site and sees every request, as the network that delivers it.
• Stripe and PayPal, when you pay, as described above.
• Google, when advertising is shown, as described above.

We do not sell your data, and we do not share it with anyone else unless the law requires it.

How long we keep it

Your account and its reports are kept until you delete them. Payment records are kept for as long as accounting rules require, even if the account is later deleted. Backups of the database are made nightly, encrypted, and kept for thirty days, so deleted data can persist in a backup for up to that long before it is gone completely.

Your choices

You can delete any saved report from your reports page and revoke any API key from your account. To delete your account entirely, or to ask what we hold about you, email info@monetific.com from the address on the account.

Changes

If this policy changes in a way that matters, the date at the top changes with it. The current version is always at https://seo.monetific.com/privacy.