The scanner is stateless by design.
This policy describes the current public shapeable.art website and audit route. The site has no account, payment checkout, advertising tracker, uploaded customer file, or hosted repository connection.
Public site requests
Vercel serves shapeable.art and may process standard request information such as IP address, user agent, requested path, timing, and security diagnostics for delivery, abuse prevention, and platform operation.
Vercel Web Analytics records privacy-focused aggregate page-view information without third-party cookies. Its documented data points may include the page path, referrer, filtered query parameters, approximate location, device type, operating system, browser, and event timestamp.
Audit requests
When a visitor requests an audit, shapeable.art receives the submitted public HTTPS URL and uses the request IP address for an in-memory limit of three audit attempts per minute. The server rejects credentials, sensitive query parameters, and private or local network targets.
The audit opens the submitted public page at two viewport sizes, creates temporary screenshots and measurements, returns the resulting evidence to the visitor, and deletes its temporary audit directory when the request finishes. The application does not create a customer account or save an audit history.
Third parties and choices
The current public service uses Vercel for hosting and Web Analytics. Visiting an audited third-party URL is necessary to produce the requested scan, so the target site and its infrastructure may receive the scanner's request under that site's own privacy terms.
Visitors can avoid submitting a URL and still read the public product pages. Technical privacy questions can be raised through the public source repository without posting private information.