Privacy policy.

Ohey is a brand of Rogue Infosec Inc.. This policy explains how we handle personal information through ohey.io and the domains that redirect to it.

Who is responsible

Rogue Infosec Inc. is responsible for personal information under its control. Our Privacy Officer handles privacy questions, access and correction requests, consent withdrawals and complaints.

What this website collects

This website offers on-demand website checks. There are no user accounts, payment forms or active monitoring subscriptions on this site.

When you submit a check, we receive the domain or public IP address, your verification response and technical request information. Our scanner visits the public website and collects response content and security evidence to produce a result. Do not submit credentials, private URLs or personal information in the domain field.

When you visit, our hosting and network providers process technical information such as your IP address, request time, browser details, requested URL and connection information. This helps deliver the website, prevent abuse and troubleshoot problems.

If you email us, we receive your email address and the information you include in your message. Please send only the information needed for your inquiry and avoid sending passwords or other sensitive credentials.

How we use information

• To deliver, maintain and protect the website and run requested checks.
• To analyze scan evidence, identify threats and maintain security research records.
• To respond to inquiries and privacy requests.
• To investigate errors, security incidents and abuse.
• To meet applicable legal and record-keeping obligations.

We do not sell personal information or use inquiries to build advertising profiles.

Hosting, security and cookies

We host the website on infrastructure we manage and use Cloudflare to deliver and protect it. Cloudflare processes request information and may use security cookies or browser checks to distinguish legitimate visitors from automated abuse. We use Cloudflare Turnstile to verify check submissions; its processing is described in the Turnstile Privacy Addendum. See Cloudflare’s privacy policy and cookie information.

The checker sets a secure, essential session cookie to protect submissions and restrict access to results to the browser that requested them. The session expires after 20 minutes. We do not use advertising trackers or analytics cookies. Fonts and images are served from our own website. You can control cookies through your browser; blocking security cookies may affect access when a security check is required.

Service providers and disclosures

Our hosting, network security and email providers process information needed to provide their services. They may process information outside Canada, where different privacy laws apply. We may also disclose information when required by law or when necessary to investigate or prevent misuse of the website.

Links to research and other external websites are governed by those websites’ own privacy practices.

Retention and safeguards

We keep technical records and correspondence for as long as needed for the purposes described here, including security and legal requirements, then delete or anonymize them. Retention periods depend on the kind of record and the services involved. Browser result links expire after 10 minutes. Scan evidence and security research records may be retained longer for threat analysis and abuse prevention; expiry of a result link does not delete that evidence.

We use encrypted connections and restrict administrative access. No method of transmission or storage can guarantee complete security.

Your choices and privacy requests

You can request access to personal information we hold about you, ask for corrections, or withdraw consent where our processing relies on it. Contact [email protected]. We may need to verify your identity, and legal or security obligations may limit what we can delete or disclose.

We will review privacy concerns you raise with us. You can also contact the Office of the Privacy Commissioner of Canada.

Changes

We will update this page and its effective date when our privacy practices change. If we introduce accounts or paid services, we will explain the associated collection and use of information before you use those features.