Safewren
Privacy, in plain English
Short version: we only use your email to check it and send you your results. We don't sell it, share it for ads, or ask for your password.
What we collect
- Your email address. You give it to us so we can check it and send you a sign-in code.
- A sign-in cookie. One small cookie that keeps you signed in for up to an hour. No advertising or tracking cookies.
- Your to-do checkmarks. These are saved only on your own device, not on our servers.
- Basic server logs. Like most websites, our hosting keeps short-lived technical logs (such as errors) to keep the site running.
What we never collect
- Your passwords. We will never ask for one.
- Your bank or card details. (If you subscribe in the future, payments are handled by a payment company, and we never see your card number.)
Who helps us run Safewren
We use a few trusted services. Each one only gets what it needs:
- Have I Been Pwned checks your email against known data breaches.
- Supabase handles sign-in and stores your email address.
- Resend delivers our emails, like your sign-in code.
- Railway hosts the website.
Why we ask for a code
Breach results are personal. Sending a code to your inbox makes sure only the owner of an email can see its results.
Deleting your data
Email privacy@safewren.com from the address you used, and we'll delete your account and email address.
Changes
If we change how we handle your data, we'll update this page and the date below.
Last updated: November 2026