Privacy policy
Last updated: 2026-08-04
What we collect
Nothing that identifies you. A scanned URL is fetched, its response headers are analysed, and the result is returned to your browser. It is not written to a database or retained after the request completes. The CSP analyser and generator run entirely in your browser — what you paste into them never leaves your machine.
Logs
The site runs on Cloudflare, which processes request metadata (IP address, user agent, timestamp) to serve traffic and mitigate abuse, governed by Cloudflare's own privacy policy.
Cookies
HeaderAudit sets no cookies of its own and uses no cross-site tracking.