Privacy Policy

Overview

SPAT (Security Posture Analysis Tool) is operated by Antibody Cyber Technology, LLC. We are committed to protecting your privacy. This policy explains what information we collect and how we use it.

Information We Collect

SPAT supports guest scans, while existing account holders may access saved scan history. Depending on how you use the service, we collect:

• Account information — Your email address and a securely hashed password (passwords are never stored in plain text). Your email is used to verify your account, enable password resets, and send essential service notifications. We also record account timestamps (registration date and last login).
• Scan data — The target hostname/domain you submit and the results we generate for it (grade, score, and findings). Scans are saved to your account so you can review your scan history.
• Your IP address — Used for rate limiting (max 20 scans/hour) and basic abuse prevention.

What We Do NOT Collect

• No names, phone numbers, or postal addresses — only your email is required to create an account
• No tracking pixels or third-party analytics
• No cookies beyond those required for sign-in and session management

Data Retention

Your account (email, hashed password, and timestamps) and the scans associated with it are retained so you can access your scan history, and remain until you delete them or request account deletion. Rate-limiting data (IP + timestamp) is transient and not retained long-term. To request deletion of your account and associated data, contact us using the details below.

Security

All traffic to SPAT is encrypted via TLS (HTTPS). We enforce security headers including HSTS, CSP, and X-Frame-Options. The tool is designed to perform only passive, non-intrusive external checks on the targets you provide.

Third-Party Services

SPAT uses Google AdSense to display advertisements on content pages. Google AdSense may use cookies and device identifiers to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the internet. You may opt out of personalized advertising by visiting Google Ads Settings.

SPAT does not use third-party analytics or CDNs. All security scanning is performed directly from our server. We never sell your personal data.

Contact

If you have questions about this privacy policy, contact us at antibodycyber.com/contact.