Privacy Policy
Last updated 20 August 2026. Short version: this site sets no cookies, runs no tracking scripts, and has no account system. The scanner never sees your pages, because it runs on your computer and not ours.
Who is responsible
The controller of any personal data described here is the independent sole trader registered in Ukraine who publishes Curbcut, contactable at hello@curbcut.org. Full registration details are provided on request to anyone exercising the rights listed below, and appear on every purchase receipt issued through our payment provider.
The tool collects nothing
The Curbcut command line tool runs entirely on your own machine using a local headless browser. It has no telemetry, no analytics, no licence phone-home and no crash reporting. The URLs you scan, the pages it loads and the reports it produces never leave your computer. We could not see them if we wanted to, and you can verify this by reading the source, which is why the source is public.
This website
No cookies
This site sets no cookies of any kind, neither ours nor anyone else’s. That is also why you were not shown a consent banner: there is nothing to consent to. There are no third-party fonts, scripts, embeds, pixels or advertising networks on any page.
Server logs
The site is hosted on Cloudflare Pages. Cloudflare processes your IP address and request metadata in order to serve the page and to block attacks. This is ordinary technical processing without which the web does not function, and we rely on our legitimate interest in delivering and protecting the site. We do not build profiles from it and we do not attempt to identify you.
Audience statistics
If we measure traffic, we use Cloudflare Web Analytics, which is cookieless, does not fingerprint visitors and produces aggregate counts only. No individual visitor can be singled out from it, by us or by anyone else.
If you email us
Mail to hello@curbcut.org is routed by Cloudflare Email Routing and
delivered into a Google mailbox. We keep correspondence for as long as needed to deal
with your question and for a reasonable period afterwards for our own records, and we
delete it on request. We do not add you to any mailing list, because there is no
mailing list. We never sell or share correspondence.
If you buy a licence
Purchases are handled by Paddle.com Market Ltd, which acts as merchant of record and is the seller on your invoice. Paddle collects your payment details and the billing information tax law requires. We never see or store your card number. What reaches us is your email address, your licence key and the country used for tax purposes, which we need in order to deliver the licence and to honour refunds and support. Paddle’s own privacy notice governs what it does with the data it collects.
Processors we use
- Cloudflare — hosting, DNS, email routing, optional cookieless analytics.
- Google — the mailbox that receives forwarded email.
- Paddle — payments, invoicing and tax, as merchant of record.
- GitHub (Microsoft) — hosting the public source code. If you open an issue there, that is GitHub’s service under GitHub’s policies, not ours.
Some of these transfer data outside the European Economic Area. Those transfers rely on the European Commission’s standard contractual clauses or, where applicable, an adequacy decision.
Your rights
If the GDPR or the UK GDPR applies to you, you may ask for access to your personal data, correction, erasure, restriction, portability, and you may object to processing based on legitimate interest. Write to hello@curbcut.org and we will answer within one month. There is no charge.
Given how little is collected, the honest answer to most access requests will be that we hold only your email correspondence and, if you bought something, your licence record.
You also have the right to complain to a supervisory authority in the country where you live or work.
Children
This is a developer and compliance tool. It is not directed at children and we do not knowingly collect data from them.
Changes
If this policy changes, the date at the top changes with it. If a change ever materially affects data we already hold about you, we will say so by email to the address we hold.