Legal

Privacy Policy

Last updated: 4 June 2026

1. Who we are

HashScanner is a trading name of Linsbury Ltd., a company registered in England and Wales. References to “we”, “us”, or “our” in this policy mean Linsbury Ltd.

For privacy-related enquiries, use our contact form.

2. What data we collect

Account data
When you register, we collect your name and email address. Passwords are stored as one-way cryptographic hashes — we never store them in plain text.

Payment data
Billing details (card number, billing address) are processed by our payment provider. We do not store card data on our systems; we retain only a transaction reference and your subscription status.

API keys
We generate a unique API key per account. The key identifier is stored; the secret portion is one-way hashed and cannot be recovered by us.

Hash lookups
We store the hash values you submit, the timestamp of each request, and your running quota usage. Hash values are one-way cryptographic digests — they cannot be used to reconstruct original file content.

Technical data
IP addresses, HTTP headers, and request metadata are processed by our cloud service provider as a standard part of delivering the service.

3. How we use your data

  • To deliver hash lookups and enforce your subscription quota.
  • To process payments and manage your subscription.
  • To detect and prevent abuse and unauthorised access.
  • To maintain the security and reliability of our infrastructure.

We do not sell your data, use it for advertising, or build behavioural profiles.

4. Legal basis (UK GDPR)

  • Contract: account data and lookup history are processed to deliver the service you signed up for.
  • Legitimate interests: security monitoring, abuse prevention, and service reliability.
  • Legal obligation: where required by applicable law (e.g. financial record-keeping).

5. Who we share data with

  • Cloud service provider(s): our hosting and compute infrastructure. All requests to HashScanner pass through their network.
  • Payment processor: your payment details are transmitted to our payment gateway to complete transactions.

All software used to manage customer accounts runs on our own servers. We do not sell or share your data with any other third parties, except where required by law.

6. International transfers

Our cloud service provider operates globally. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Data retention

  • Account data: retained for the life of your account plus 12 months after closure.
  • Lookup logs and quota counters: retained for 90 days, then deleted.
  • Payment records: retained for 7 years as required by UK financial regulations.

8. Your rights (UK GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data (“right to be forgotten”), subject to our legal retention obligations.
  • Restrict processing in certain circumstances.
  • Port your data to another provider.
  • Object to processing based on legitimate interests.

To exercise any of these rights, use our contact form. You may also lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Cookies

We use only essential session cookies required for account authentication. Our bot-protection widget on the home page search may set a short-lived verification token; it does not track you across other sites or build an advertising profile.

10. Security

All connections use TLS encryption. Data stored in our cloud infrastructure is encrypted at rest. We apply the principle of least-privilege access to all production systems.

11. Changes to this policy

We may update this Privacy Policy from time to time. For minor corrections or clarifications, we will update this page and revise the “last updated” date above — no separate notice will be sent. For material changes (new types of data collected, new purposes, or new third-party sharing), we will notify registered users by email before the changes take effect.

12. Contact

Privacy questions or requests? Use our contact form.