Privacy

Privacy

Last updated 2026-07-08

What we store

When you scan a domain, we store the domain, its score, grade, and check results, and the time of the scan. When you submit an email (a lead form, a beta request, or an ownership challenge), we store that email together with the domain and pricing tier you associated with it.

Scan reports are public

A report page is viewable by anyone who knows its domain, the same way any public URL is. Recently scanned domains and their scores may also appear on the homepage. Do not scan a domain expecting the result to stay private.

What we do not store

We do not store anything from the target site itself beyond the specific technical signals each check looks at (for example: does agents.md exist, is the homepage readable). We do not track visitors to verified.md with third-party advertising cookies.

Retention

We keep scan history and lead records for as long as the service operates, or until you ask us to delete them, whichever comes first.

How we use it

Email addresses are used to reply about a beta request or certification, and to send certification related notices (a score drop, a re-verification result). We do not sell or share your data with third parties for marketing. Our lawful basis is contract for paid services, and legitimate interest for running scans and following up on leads.

No cookies

verified.md sets no cookies and uses no browser storage. There is no cookie banner because there is nothing to consent to.

Who processes it

Cloudflare provides our hosting, database, and email routing. Resend delivers our transactional email (beta replies and certification notices). Both act as processors on our instructions; neither receives your data for their own marketing use.

Where it lives

verified.md is operated from the EU (Displace Agency, Spain) on Cloudflare's infrastructure. Data may be processed in Cloudflare's global network as part of normal request handling.

Your rights

If GDPR applies to you, you have the right to access, correct, erase, or receive a portable copy of your data, and to object to how we use it. Exercise any of these by emailing hello@verified.md. If you are unsatisfied with our response, you can complain to the Spanish data protection authority, the AEPD.

Deletion

Email us at hello@displace.agency to request deletion of your email, your domain's lead record, or both. We will confirm once removed.

Contact

Questions: hello@displace.agency.