Privacy Policy
This explains what happens to a domain you scan, what we never collect, and who can see a result. It is written to be read rather than to be survived.
What This Covers
This policy covers FanTazTech LLC and the Blindspot scanner at fantaztech.com. Blindspot is not a penetration test. It reads public records only, and it never logs into a system, tests a password, or touches a private network.
What You Give Us
A domain. That is the only thing the free scan requires. There is no account, and you are not asked for a name, a company, or a payment method to run one.
The domain is normalized in your browser before it is sent, so a scheme, a path, or a query string you paste in is removed rather than transmitted.
What the Scan Reads
Only sources that are already public: DNS records, certificate transparency logs, public web responses, domain registration records, and supported breach and infostealer datasets. The full register is on the methodology page.
Where a supported dataset shows that an address at your domain appears in breach data, we report the count and the dates. A password is never displayed to you, never stored for you, and never tested against anything.
What We Do Not Send to Analytics
We measure whether the product works, not who you are. The following never reach general analytics:
- the domain you scanned
- any email address
- the text of a finding, or the evidence behind it
- any credential
What is recorded is the shape of the interaction: that a scan started, whether it completed or failed, the kind of failure, the grade band, and which surface it started from. That is enough to find a broken funnel and not enough to identify a business.
About your IP address. We use Google Analytics, and like any web request, loading it sends your IP address to Google, which uses it to derive an approximate location and then discards it. Google Analytics does not log or store IP addresses. We would rather say this plainly than claim something neater that is not true of how the web works.
We do keep a security log. When a scan is requested we record the address it came from, the country and network our host reports for it, the domain that was asked about, and whether the request was served, refused, or rate limited. We keep it because a scanner that anyone can point at any domain has to be watched for misuse, and because we would rather see that happening than guess. It is kept for no more than 30 days, it is never attached to your report, and it is never sold or shared for marketing.
Your Result
A free scan result is shown to the person who ran it. We do not publish individual business results, and we do not sell a named result as a page, a screenshot, or a social image. Aggregate and anonymized figures may be used to describe the product.
Cookies and Storage
The domain you enter is kept in your browser session so that moving from a single-check tool to the full scan does not make you type it again. It is cleared when you close the tab.
Google Analytics sets a first-party cookie to tell one visit from another. It holds a random identifier, not a name, an address, or anything you typed. We do not use advertising cookies, we do not run ad personalization, and we do not share analytics data with advertising products.
Children
Blindspot is a business tool and is not directed at children.
Contact
Questions, corrections, or a request to remove something: hello@fantaztech.com. If you believe a finding about your domain is wrong, we will recheck it at no cost, and a finding that cannot be reproduced is removed.
FanTazTech LLC
800 Denow Rd, Suite C389, Pennington, NJ 08534
Changes
When this policy changes materially, the date at the top changes with it. Continued use of the scanner after that date means the updated policy applies.