We guard sites. That includes yours.

Last updated: August 25, 2026

This policy covers wolfwarden.com and the services of WolfWarden LLC. Short version: we collect the minimum needed to run the business, we don't sell data, and we don't run ad trackers.

What we collect

Contact form: the name, email, business name, and message you submit, relayed to our inbox so we can reply. Security scan: the domain you enter is checked against public records. Identical-domain results may be cached at Cloudflare's edge for up to 10 minutes to prevent abuse; the domain is not added to an analytics profile. If you create a shareable report, that snapshot is stored for 90 days. If you request a human review, the email address, domain, grade, and summary are relayed as business correspondence. Payments and onboarding: Stripe handles payment details; WolfWarden never sees or stores card numbers. To verify a purchase and begin delivery, WolfWarden may store the Stripe Checkout session reference, verified plan, billing period, payment status, customer name and email, and the project-intake information you submit. The structured checkout and intake records are retained for up to one year and may also be relayed to our business inbox as correspondence. Do not submit passwords, recovery codes, or other account secrets through the intake form. Site measurement: Cloudflare provides aggregate, cookie-free traffic analytics. WolfWarden also records first-party events such as page views, scans, plan-finder use, booking-link selections, checkout progress, verified purchase outcomes, and successful form submissions. Those event records do not contain names, email addresses, message text, Stripe session IDs, or the domain scanned. Campaign source information may be stored in your browser for up to 90 days and included when you voluntarily submit a form. We do not run advertising pixels or third-party ad trackers.

What we use it for

Responding to you, delivering the services you bought, reviewing scan findings you asked us to review, maintaining shareable reports you explicitly create, and billing. We send marketing email only if you asked for it, and every such email has a working unsubscribe.

Who else touches it

Only processors needed to operate: Cloudflare (hosting, security, aggregate analytics, and first-party event storage), Stripe (payments), Web3Forms (form relay), and Google Workspace or Microsoft 365 (email). We do not sell, rent, or trade your information.

Client data

When you're a client, we may hold credentials and access needed to manage your site and DNS. Access is limited to what the work requires, protected with multi-factor authentication, and returned or revoked when the engagement ends.

Your choices

Email us to see, correct, or delete what we hold about you, and we'll do it — no forms, no runaround. Data we're required to keep for tax or legal reasons (like invoices) stays for the required period.

Questions or requests? hello@wolfwarden.com