Skip to content

Policies

Privacy policy

Suitcast stores what it needs to scan a website, show you the report and run a plan, and nothing more. This page lists all of it, who else touches it, and how long it is kept.
Last updated . 13 sections.

At a glance

  • No third-party analytics, advertising or chat scripts on this site
  • Four first-party cookies, listed below with their lifetimes
  • Free-scan results are deleted after 30 days if unclaimed
  • Personal information is never sold or shared for advertising
  • Ask for a copy or deletion at support@suitcast.com

01Who runs Suitcast

Suitcast is operated by Adi Leviim, a licensed dealer (osek murshe) registered in Israel. For anything in this policy, write to support@suitcast.com. The same address handles access, correction and deletion requests.

Suitcast's servers are in the United States, and the founder works on them from Israel, so personal information is stored in the United States and accessed from Israel. It is protected the same way wherever it is handled, as described in this policy.

02What Suitcast collects

  • You scan a website
    What is stored
    The address you entered, the public pages loaded, the requests those pages made, the accessibility findings, the scores, the time, and a one-way hash of your IP address
    Why
    To produce the report, and to limit free scans to five per IP address per day
  • You ask for the full report or sign in
    What is stored
    Your email address, whether you agreed to the weekly note, the sites you claimed, and the state and industry you enter for a site
    Why
    To send the report and sign-in links, and to match lawsuits to your site
  • You subscribe
    What is stored
    Your Polar customer and subscription identifiers, plan, billing cycle, status and renewal date, and the agency name on Pro reports
    Why
    To run the plan. Card details go to Polar and never reach Suitcast
  • You arrive from a link
    What is stored
    The referring page, campaign tags and ad click identifiers in the link, in two cookies
    Why
    To learn which channels bring customers. Never your name or anything typed into a form
  • You email support
    What is stored
    Your message and address, in the support inbox
    Why
    To answer you

03What Suitcast does not collect

Suitcast runs no third-party analytics, advertising, chat or session-replay scripts on its own pages, so no outside company sees what you do here. Sign-in uses single-use email links, so there is no password to store.

The scanner reads only public pages. It never submits forms, never logs in and never reads pages behind an account. It does not collect the personal information of the visitors to a scanned site. A finding can include a short piece of a page's code, such as the element that failed a check.

04Cookies

Suitcast sets four first-party cookies and no third-party cookies. None of them is used for advertising.

  • sc_session
    Purpose
    Keeps you signed in. Readable only by the server.
    Lifetime
    30 days, renewed while you use the site
  • sc_signed_in
    Purpose
    Says only that someone is signed in on this device, so public pages can show a Dashboard link. Holds no session value.
    Lifetime
    30 days
  • sc_attr_ft
    Purpose
    The first link or site that brought you here. Readable only by the server.
    Lifetime
    365 days
  • sc_attr_lt
    Purpose
    The most recent link or site that brought you here. Readable only by the server.
    Lifetime
    365 days

Cloudflare, which protects the site from abuse, may set a short-lived security cookie to tell people from automated traffic. You can delete cookies in your browser at any time; the site still works, and you will need a new sign-in link.

05How scan data is used

Scan results are shown to you at a private link and, if you claim the report, in your account. Scan pages are marked so search engines do not index them. Aggregate, anonymous counts, such as how often a tracking script fires before consent across all scans, may be published on the data pages. Individual scan results and the addresses of scanned sites are never published, sold or shared.

06Who processes data for Suitcast

A small number of companies process personal information on Suitcast's behalf, each only for the service listed.

  • Polar
    What it does
    Merchant of record: checkout, payments, invoices, receipts and sales tax
    What it receives
    Your email and payment details when you subscribe
  • Resend
    What it does
    Delivers email
    What it receives
    Your email address and the email content
  • Cloudflare
    What it does
    Domain, network security and routing of support email
    What it receives
    Your IP address and request details when you load a page
  • OVHcloud US
    What it does
    Hosts the server in the United States (Virginia)
    What it receives
    Everything Suitcast stores, encrypted in transit
  • Google
    What it does
    Hosts the support inbox
    What it receives
    Emails you send to Suitcast

Lawsuit data comes from CourtListener, the public archive of the Free Law Project. Suitcast sends it no information about you.

07How long data is kept

  • Free-scan results no account claimed
    Kept for
    30 days, then deleted
  • Scan history after a subscription ends
    Kept for
    90 days, then scans older than the latest are deleted
  • Email delivery records
    Kept for
    12 months
  • Your account
    Kept for
    Until you ask for deletion
  • Sign-in links
    Kept for
    Single use, and expire if unused

08Email

Suitcast sends transactional email: sign-in links, report-ready notices, and weekly alerts for sites on a paid plan. The optional weekly note about new lawsuits in your state is sent only if you left its box checked when you asked for your report. Every note carries a one-click unsubscribe link, and unsubscribing takes effect immediately.

09People and businesses named in lawsuit data

The lawsuit pages are built from public court records and from public filings curated with a link to their source. They name parties as the court record names them. Suitcast does not contact the businesses that appear as defendants and does not sell lists of them.

Suitcast is not a consumer reporting agency. The lawsuit data describes court filings and must not be used to decide a person's eligibility for credit, insurance, employment, housing or government benefits; the terms forbid it.

If you believe a record about you or your business is wrong, email support@suitcast.com with the case link. Corrections are made in the next daily rebuild.

10Security

Every connection to Suitcast is encrypted. Session tokens and sign-in tokens are stored only as one-way hashes, and IP addresses used for rate limits are hashed. Access to production systems is limited to the founder.

11Your choices and rights

You can ask for a copy of your data, a correction, or deletion of your account and everything tied to it. Email support@suitcast.com from the address on the account; requests are answered within 30 days. Residents of California and other states with consumer privacy laws can use the same address for every right those laws give.

Suitcast does not sell or share personal information as the California Consumer Privacy Act defines those terms, so browser signals such as Global Privacy Control are honored by default. The do not sell page explains this in full.

12Children

Suitcast is a service for businesses. It is not directed to children and does not knowingly collect information from anyone under 16.

13Changes to this policy

When this policy changes, the date at the top changes with it. Material changes are announced by email to account holders before they take effect.

Questions about this policy?

Email the founder directly. Every message is read.

support@suitcast.com

Related policies