Privacy Policy

When you use BattleTester, we collect and store the following:

• Account information: your name, email address, and authentication tokens, managed through our auth provider (Clerk).
• Scan targets: the URLs and endpoints you submit for testing.
• Credentials you provide: login credentials for the roles you configure (e.g. user, admin accounts on your app). These are stored as long as the scan record exists and are never used for any purpose other than running the scan.
• Scan results and reports: discovered endpoints, vulnerability findings, severity ratings, and scan logs generated during testing.

We do not use analytics, ad tracking, or third-party tracking scripts of any kind.

• To authenticate you and manage your account
• To run security scans against targets you submit
• To generate and display your scan reports
• To improve the service (for example, reducing false positives and improving detection accuracy)

We do not:

• Sell your data to third parties
• Share your scan results with anyone other than you
• Use your credentials for any purpose other than running your scan
• Use your data for advertising

The operator of BattleTester may review scan reports and findings for the sole purpose of improving the service (for example, to reduce false positives, improve detection accuracy, and understand how the tool performs across different application types).

This access is limited to the operator and is never used to disclose, share, or act on your findings in any other way.

The only third-party service we use is:

• Clerk: handles authentication and account management. See Clerk's Privacy Policy.

No other third parties receive your data.

Scan reports, findings, and associated credentials are stored indefinitely until you delete the scan. Once a scan is deleted, all data associated with it is removed.

Account data is retained for as long as your account is active. If you want your full account and all associated data deleted, contact us at info@battletester.app.

• You can delete individual scans and their data directly from the app at any time
• You can delete your account through your account settings (managed by Clerk)
• To request deletion of all scan data associated with your account, email info@battletester.app
• You can ask what data we hold about you at any time via the same email

We may access and disclose your data if required by law or to investigate suspected misuse of the platform.

We may update this policy from time to time. Material changes will be communicated via the platform. Continued use of the service after changes constitutes acceptance.