Privacy

Public Score and report access

The public scanner processes the webpage URL you submit and keeps a temporary report for up to 24 hours of access. It does not require an account. To open the full report, we collect the name and email you explicitly submit for that purpose. We do not verify the email, send the report by email, or subscribe you to advertising. The PDF is generated in your browser.

These records are stored in the Site database hosted through Sites and Cloudflare. Contact records expire after 30 days. Expired records are excluded from access and are physically removed in bounded cleanup batches during later service requests; removal may therefore happen after the expiry date. Security quotas use time-based counters, without storing your IP address in those counters. The hosting provider may maintain separate operational logs.

After opening a report, use “Delete my contact and this report” to remove both from the active database while this browser page retains its access token. Reloading or closing this tab loses that token. For privacy requests, contact info@suprara.com. Do not submit confidential URLs, credentials, or personal information inside a URL.

What the platform stores

Your submitted organization label, reference URL, content, checklist answers, assessment history, learning progress, exercise responses, action status and saved drafts are stored in the Site database under your verified Suprara account identity. Language preference is stored in this browser.

If you pass a final exam, we also store the name you enter for your completion certificate, your score, certificate ID and issue date. Exam results and completion records are linked to your Suprara account.

The scanner fetches the public URL you submit plus robots.txt and one sitemap, and validates public DNS using Cloudflare DNS. Domain names are sent to that DNS service for resolution. It does not call external AI APIs or connect to workspace apps. Do not submit URLs containing personal information or secrets. Personalized scan reports and completion certificate PDFs are generated in your browser from your saved records. Resource worksheet PDFs are delivered by our server after we verify your signed-in Suprara account.

Suprara uses Supabase to send one-time login codes and verify your email. Your first sign-in creates a free account. Secure, HttpOnly cookies hold your session for up to seven days; signing out ends this browser session. We store hashed session and rate-limit metadata to prevent abuse. Expired security records are excluded immediately and removed in bounded cleanup batches. Existing platform-login records are kept separate and are not linked by email. The public report’s 24-hour access window and 30-day contact expiry do not apply to saved workspace or Academy records. Signing out or reaching the seven-day session limit does not delete your account or saved work. This version does not automatically expire saved workspace or Academy records. To request account or workspace deletion, contact info@suprara.com. The public report’s deletion control removes only that report and its submitted contact details.

Optional analytics

If you accept analytics in the separate privacy control, Google Analytics is loaded through Google Tag Manager to measure page visits, interface actions and confirmed outcomes. No analytics tag is loaded before acceptance. We exclude form contents, email addresses, names, scanned URLs, exam answers and scores, and ROI amounts. Only approved campaign labels and sanitized page addresses are measured. Rejecting does not limit access. You can withdraw using Analytics privacy; this reloads the page to stop loaded tags. Save pending changes first. Your choice is stored locally in this browser. Google may process online identifiers and device information when you consent. Measurement covers consenting browsers; it is not a complete cross-device record.