Privacy

To run a scan without an account: the URL you submitted, the findings produced from it, and your IP address — the last one only to rate-limit the endpoint, which is what stops the service being used to scan other people.

If you give us your email for a result: that address, linked to that scan.

If you create an account: your email address, a hash of your password (never the password), the targets you connected, your scan history, and your subscription status as Stripe reports it.

During a repository scan: file contents, read over a read-only GitHub App token, for the duration of the scan only.

Only if you opt in: product analytics — page views, product actions, application errors, a pseudonymous identifier, and for signed-in users an account id and email address.

• · We never clone your repository. Files are read during the scan and gone after it.
• · We never store a secret in clear text. A key we find is masked before it reaches the database, the interface, or any log line — including our own.
• · We never put evidence or a secret, masked or otherwise, into an email.
• · We never sell, rent or share your data with advertisers. There are none.
• · We set no tracking cookies unless you accept analytics. Declining costs you nothing.

Running a scan you asked for, keeping your account, and taking your payment are performance of a contract (GDPR Art. 6(1)(b)). Rate limiting, abuse prevention and security logging are our legitimate interest in keeping the service, and the third-party platforms it touches, from being abused (Art. 6(1)(f)). Analytics runs on consent and only after you give it (Art. 6(1)(a)); you can withdraw it at any time from Privacy settings, and withdrawal is as easy as giving it was. Swiss users: the equivalent bases under the revised FADP apply.

Sub-processors, all bound by data processing agreements. Transfers outside the EU/Switzerland rest on Standard Contractual Clauses.

The AI Deep Scan is the one place your code leaves our infrastructure. Excerpts of the files being checked are sent to the model named above through Vercel AI Gateway, which is configured for zero data retention — the excerpts are not kept and are not used to train anything. If you would rather no code left at all, do not run the Deep Scan: the four standard checks never call a model.

• · Repository file contents — the length of the scan. Not stored.
• · Findings and scan history — until you delete the target or the account.
• · Account data — until you delete the account, then removed within 30 days.
• · Rate-limit records — a rolling window, then discarded automatically.
• · Payment records — held by Stripe for as long as accounting law requires.
• · Analytics — retained by PostHog for 12 months, and only if you opted in.
• · Your analytics choice — a first-party cookie, six months.

You can ask for a copy of your data, a correction, its deletion, a restriction on how it is used, or its export in a portable format — and you can object to processing based on legitimate interest. Write to info@sentris.dev and you will get an answer within 30 days. There is no fee.

You can also delete your account yourself, and revoke the GitHub App from your GitHub settings at any time without asking us. If you think we got this wrong, you can complain to your national data protection authority, or in Switzerland to the FDPIC.

Everything travels over TLS. Passwords are hashed, never stored or logged in a recoverable form. Repository access uses short-lived, read-only, installation-scoped GitHub tokens. Secrets found during a scan are masked at the point of discovery rather than at the point of display, so an unmasked value never exists in storage in the first place. Scan results live behind unguessable URLs, are served with no-store, and are never framed or indexed.

Sentris is a tool for developers and is not directed at anyone under 16.

If this notice changes materially, the date at the top changes with it and account holders are told by email before the change takes effect. See also our Terms of Service.