Legal

Privacy notice

We collect as little as a security service can. This site sets no cookies and loads no third-party scripts.

Last updated

Who we are

ORGANIC VILLAGE(UK) LIMITED (11783758, United Kingdom) is the controller for personal data processed through the hosted mcpprobe service and this website.

What we collect and why

DataPurposeLawful basis
Account email and nameSign-in, scan notifications, billing contactContract
Authorisation records, including the IP address that started the scanProving each scan was authorisedLegal obligation and legitimate interests
Scan evidenceProducing your reportContract
Billing details (held by Stripe)Taking payment for paid plansContract
Page path and referring host, without identifiersCounting page views, if enabledLegitimate interests

Scan evidence is about servers, not people, but a response can contain personal data if your server returns it. We redact tokens and keys before storage and keep evidence only for your plan's retention period.

The open-source CLI

The CLI sends nothing to us. Results stay on your machine unless you upload them to the hosted service.

Cookies and analytics

This site sets no cookies. Page views, when counted at all, are recorded as the path and the referring host only, with no identifiers, and are not collected when your browser sends Do Not Track.

Where it is processed and who else sees it

Data is processed in London (AWS eu-west-2). Sub-processors are listed on the security page. We do not sell personal data or share it for advertising.

How long we keep it

Account data for as long as the account is open and 30 days after closure. Evidence for your plan's retention period. Authorisation records for six years. Billing records for as long as tax law requires.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to processing, and ask for a copy in a portable format. Write to hello@mcpprobe.tech. You can also complain to the Information Commissioner's Office (ico.org.uk).