Privacy notice

Who we are

PatchTurtle is run by Advent Digital, which is the controller of the personal data described here. Contact us at hello@patchturtle.com.

What we collect and why

Data	Why	Lawful basis	How long
The domain you check and the scan results	To run the check and show you the results	Legitimate interests (providing the service you asked for)	30 days, or as long as a linked enquiry is kept
A one-way, daily-changing code derived from your IP address	To limit how many checks each visitor can run and prevent abuse	Legitimate interests (security and fair use)	2 days
Your name and email address when you unlock a report	To email you the report and follow up about it	Legitimate interests (responding to your request)	12 months
Your choice to receive security alerts	To send occasional alerts about your platform, only if you ticked the box	Consent, which you can withdraw at any time	Until you unsubscribe, or 12 months after your last interaction

We don’t sell your data, and we don’t publish anyone’s scan results.

Who processes it for us

• Cloudflare hosts the website and database, runs the Turnstile bot check and forwards email to us.
• Resend sends the report emails.

These providers may process data outside the UK. Where they do, the transfer is covered by safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK–US data bridge.

Cookies

We don’t set advertising or tracking cookies. Cloudflare Turnstile may use strictly necessary storage to tell humans from bots, and we use Cloudflare Web Analytics, which doesn’t use cookies.

Your rights

You can ask for a copy of your data, or ask us to correct or delete it, restrict or object to how we use it, or to stop sending you alerts. Email hello@patchturtle.com. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office.

About the sites you check

If someone checks your website, we store the domain and the publicly visible information described on our How we scan page. We only share the results with the person who ran the check. You can ask us to exclude your site.