Privacy
Who is responsible
NestCipher is operated by GoSmartR Ltd, a company registered in England and Wales (company number 15407332), registered office: 18 Howard Road, Reigate, Surrey, RH2 7JE, United Kingdom. GoSmartR Ltd is the data controller for this site.
What the tools do with your input
NestCipher keeps no database and stores nothing you type into the tools. The Email Analyzer sends your pasted email to OpenAI for analysis and returns the result; the Headers Scanner fetches the URL you enter once from our server; the OWASP LLM Top 10 explorer runs entirely in your browser. Paste only content you are comfortable sending to the listed providers — redact anything you would not.
Processors
VercelHosting and edge network
Standard request data (IP address, user agent) in transient infrastructure logs.
OpenAIEmail Analyzer model
The email content you paste into the Email Analyzer, sent for analysis. OpenAI's API data policy applies.
ResendNewsletter delivery
Your email address, if you subscribe to release notes.
PlausibleAnalytics
Cookieless, aggregated page-view statistics. No personal profiles.
UpstashRate limiting
Short-lived request counters keyed by a client identifier derived from your IP address. They expire automatically.
Retention
- Tool inputs: not stored by NestCipher.
- Rate-limit counters: expire automatically within about a day.
- Newsletter address: kept until you unsubscribe (every email has an unsubscribe link), or on request.
- Infrastructure logs: held briefly by Vercel under its standard retention.
Your rights
Under UK GDPR you can ask for access to, correction of, or deletion of personal data we hold (in practice: your newsletter address), object to or restrict processing, and take your data elsewhere. You can also complain to the Information Commissioner's Office (ico.org.uk).
Contact
Privacy questions and requests: hello@nestcipher.com. Security reports: see security.txt.