Privacy
Last updated 17 October 2026.
Who we are
ChangeVane is run by Ashique Mohammed C. Contact: hello@changevane.com.
What we store, and why
- Website addresses and what we found on them. When you ask for a check, we store the website’s address and the result: public information about a public website.
- In our database, a scrambled form of your IP address — never the address itself. To stop anyone from using our checks to flood websites, we count requests per visitor. We store a keyed hash of your IP address (HMAC-SHA256 with a secret only our server holds), which cannot be turned back into the address, and delete it after 30 days.
- What our hosting provider logs. Vercel, which hosts this website, keeps standard request logs: your IP address and the address of each page you request, including results links (/r/…). They are kept briefly, for security and operations, under Vercel’s own policy; we don’t copy them into our database.
- Your email address, only if you subscribe to weekly reports. We use it to confirm the sign-up and to send the reports you asked for — nothing else. We never sell it or share it, and we don’t send marketing.
- Results links. Each check gives you a private link. Anyone you give that link to can see those results, so share it with care.
We don’t use cookies, analytics or tracking scripts.
How long we keep it
- Free checks — the request, its results, its results links and the hashed IP address that asked for it — are deleted 30 days after the check was requested.
- The hashed IP address recorded when you subscribe is deleted 30 days after you subscribe. Your subscription itself stays, so we can send your reports.
- A sign-up you never confirm, including its email address, is deleted 7 days after it was made. Nothing is checked or sent until you confirm.
- When you unsubscribe, checks and emails stop at once, and your subscription — your email address and the monitoring history of your website — is deleted 30 days later.
- Backups. We keep encrypted daily backups for 30 days, so deleted data can remain in a backup for up to 30 days longer.
Who processes it, and where
- Supabase
- Our database: website addresses, check results, hashed IP addresses, and subscriptions with their email addresses. Mumbai, India.
- Render
- Runs the checks: the program that visits websites and records what it finds. Singapore.
- Vercel
- Hosts this website. Every visit passes through it, as through any web host. Its global network; requests that reach our code are handled in Mumbai, India.
- Resend
- Sends our emails: sign-up confirmations and the weekly reports you ask for. Japan (Tokyo).
- Cloudflare
- Runs the address book for changevane.com (DNS), forwards email sent to our addresses, and stores our encrypted backups. Its global network.
So your data is stored and processed outside your own country.
Your choices
- Every report email has a link to unsubscribe at once.
- To see, correct or delete what we hold about you, write to hello@changevane.com. We can find a subscription by its email address. We can’t connect a hashed IP address back to you, so we can’t find free checks by who asked for them — they delete themselves after 30 days.
How our bot visits websites is described on its own page.