Privacy

The Execution Risk Scanner accepts text you type into a 20-question diagnostic form, runs a deterministic rules-based scoring engine in your browser, and returns a report. It is a self-assessment tool. It does not collect device telemetry, behavioural analytics, or third-party tracking pixels.

Signed-out: your scans are stored only in this browser's localStorage under the key ers.scans.v1. Nothing leaves your device.

Signed-in: your scans are stored on our managed backend and bound to your account. Row-level security ensures only you can read or modify your records, unless you explicitly mark a report as “shared”, in which case anyone with the report URL can read that single record.

We store the email address you sign up with and the authentication token issued by our identity provider. We do not store passwords; they are hashed by the auth provider.

We do not sell your data. We do not run advertising trackers. We do not share your scans with third parties. We do not train models on your inputs.

You can export every scan tied to your account as JSON from the account menu, and you can permanently delete your account and all associated scans from the same place. Local-only scans can be cleared by removing site data in your browser.

For privacy questions, reach the operator at the support address listed on your deployment.