1Scan - Powered by City of Hats
Privacy Policy - 1Scan

Privacy Policy

Last Updated: January 15, 2025

Privacy Overview

At 1Scan, operated by City of Hats, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you use our vulnerability scanning service.

We believe in transparency and data minimization - we only collect what's necessary to provide our service.

By using 1Scan, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use our service.

Information We Collect

We collect the following types of information:

1. Account Information

  • Email address (for account creation and communication)
  • Payment information (processed securely via City of Hats)
  • Username (if you choose to create one)

2. Technical Information

  • IP address and geolocation data
  • Browser type and version
  • Operating system information
  • Device identifiers
  • Access times and referring URLs

3. Scan Data

  • URLs and domains you choose to scan
  • Vulnerability scan results and reports
  • Scan frequency and timing
  • Security findings and recommendations
Note: We do NOT collect passwords, sensitive form data, or any information from the websites you scan beyond security-related findings.

How We Use Your Information

We use collected information for the following purposes:

Purpose Description
Service Delivery To provide vulnerability scanning and security reports
Account Management To manage your account and process payments
Communication To send service updates, security alerts, and support responses
Improvement To enhance our scanning algorithms and user experience
Security To detect and prevent fraud, abuse, and unauthorized access
Legal Compliance To comply with legal obligations and protect our rights
We NEVER sell your personal information or scan data to third parties!

Data Security Measures

We implement industry-standard security measures to protect your information:

  • Encryption: All data transmissions use SSL/TLS encryption
  • Access Control: Strict authentication and authorization protocols
  • Data Storage: Encrypted storage with regular security audits
  • Monitoring: 24/7 security monitoring and intrusion detection
  • Updates: Regular security patches and vulnerability assessments
  • Backups: Secure, encrypted backups with disaster recovery plans
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to using best practices.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

Essential Cookies

  • Authentication and session management
  • Security features and fraud prevention
  • Remembering your preferences

Analytics Cookies

  • Understanding service usage patterns
  • Improving user experience
  • Identifying technical issues

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality of the service.

We do NOT use third-party advertising cookies or sell tracking data to marketers.

Information Sharing

We do NOT sell, rent, or trade your personal information. We may share data only in these limited circumstances:

  • Service Providers: With trusted partners who help operate our service (under strict confidentiality agreements)
  • Legal Requirements: When required by law, court order, or government request
  • Protection: To protect the rights, property, or safety of 1Scan, our users, or the public
  • Consent: With your explicit permission for specific purposes
  • Business Transfer: In connection with a merger, acquisition, or sale of assets (with notice to users)
Your scan results and vulnerability data are NEVER shared without your explicit consent!

Your Privacy Rights

You have the following rights regarding your personal information:

Right What It Means
Access Request a copy of your personal data we hold
Correction Update or correct inaccurate information
Deletion Request deletion of your personal data
Portability Receive your data in a portable format
Objection Object to certain uses of your information
Restriction Limit how we process your data

To exercise any of these rights, please contact us at admin@cityofhats.com. We will respond to your request within 30 days.

International Users: We comply with GDPR, CCPA, and other applicable privacy regulations. Your rights may vary based on your location.

Data Retention

We retain your information for as long as necessary to provide our services:

  • Account Data: Retained while your account is active
  • Scan Results: Stored for 90 days for historical comparison
  • Payment Records: Kept as required by financial regulations
  • Support Communications: Retained for quality and training purposes

Upon account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

Children's Privacy

1Scan is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will promptly delete that information.

If you believe we have information from or about a child, please contact us immediately at admin@cityofhats.com.

Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes:

  • We'll update the "Last Updated" date at the top
  • We'll notify you via email for significant changes
  • We'll provide a summary of key changes
  • Continued use after changes constitutes acceptance

We encourage you to review this policy periodically to stay informed about how we protect your information.

Privacy Questions or Concerns?

We're committed to protecting your privacy. If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: admin@cityofhats.com

1Scan is operated by City of Hats
Your privacy is our priority.