The short version. There are no accounts. Most tools run entirely inside your browser and never transmit your files or text anywhere. The few tools that do need a server — AI summaries, translation, live market and weather data, and location evaluation — send only what they need to, and we do not keep it.
1. What we do not collect
No account, no email, no password. ScanSpot has no sign-up, so there is no user database to breach.
No file uploads for the browser tools. Image resizing and compression, format conversion, PDF merge/split/convert, CSV viewing and file checksums all run locally using your browser's own APIs. The file is read into memory and discarded when you close the tab.
No sale of personal data. We do not sell, rent or trade data about you, and we do not run advertising networks on this site.
2. Data that does leave your device
Some tools cannot work without a server. In each case, only the minimum needed is transmitted, and nothing is written to a database.
AI Summarizer and AI Translator — the text you paste is sent to a third-party large language model provider to generate the result. Do not paste anything confidential that you would not send to another company's API.
AI Location Evaluation — the industry you pick and the map coordinates of the location you select are sent to our API and on to the language model provider, so a report can be generated. We do not store the report; it lives in your browser's local storage so it survives a reload.
Package tracking — the tracking number you enter is sent to the tracking provider, if one is configured, to fetch status events.
Currency, stocks and weather — your request is proxied through our API to a public data provider. The provider sees our server, not you.
IP lookup — your public IP address is read so it can be displayed back to you. It is not logged or retained.
Address search on the AI Location Evaluation page — when you type an address, that text is sent to a geocoding service to turn it into coordinates. If your browser is set to Chinese, that service is Amap (AutoNavi); otherwise it is OpenStreetMap's Nominatim. The address you typed is what they receive — no account, no identifier, and nothing else from the page.
Map tiles on the AI Location Evaluation page — the map background is fetched from Amap (Chinese browsers) or OpenStreetMap. Those requests reveal the map area you are looking at, and your IP address as with any web request.
The mapping library itself (Leaflet) and the image-export library (html2canvas) are served from this site, not from a third-party CDN, so loading them does not contact anyone else.
3. Analytics
We use Google Analytics 4 to understand which tools people use. It records pages viewed, approximate location derived from your IP address, referring site, device and browser type, and the names of tool events (for example, that a PDF was merged). It does not receive the contents of anything you type or any file you process. You can block it with any content blocker, and the site continues to work.
4. Local storage in your browser
We keep a small amount of data in your browser's local storage so the site remembers your choices: your theme (light or dark), your language, your list of saved packages, your favourite tools and your last search. This never leaves your device and is deleted when you clear site data. We do not use it to track you across other websites.
5. Cookies
The site itself sets no advertising or tracking cookies. Google Analytics may set cookies to distinguish sessions. If we add paid reports, our payment processor will set its own cookies during checkout to prevent fraud.
6. Who processes data on our behalf
Cloudflare — hosting and content delivery.
Google Analytics — usage measurement.
DeepSeek / Moonshot AI — the language models behind the AI tools.
Public data providers — exchange rates, market quotes and weather forecasts.
Amap (AutoNavi) — address lookup and map tiles, if your browser is set to Chinese.
OpenStreetMap / Nominatim — address lookup and map tiles, for all other languages.
2Checkout (Verifone) — payment processing, if and when paid reports are available.
7. Your rights
Because we hold no account and no personal profile, there is normally nothing for us to export or erase. If you are in the EEA, the UK, California or another jurisdiction with data protection law, you may still contact us with a request and we will answer within the period your law requires. Where we rely on legitimate interests for analytics, you can object at any time by emailing us or by blocking the analytics script.
8. Children
ScanSpot is a general-audience utility site and is not directed at children under 13. We do not knowingly collect personal information from them.
9. Changes
If this policy changes materially we will update the date at the top and post a notice on the homepage. Continued use of the site after a change means you accept the revised policy.