# Privacy Policy

ifport.io checks TCP port visibility only for the observed request-source path that contacted the service.

## Default scans

- `GET /`, `GET /json`, and related scan endpoints are ephemeral by default.
- Default scans do not create a public result permalink, SVG card, or persisted evidence pack.
- Default scan responses may be held in a short technical cache for roughly 30-60 seconds.
- Default scan events are not written to the public result store.

## Explicit saved results

- Use `?persist=true` or `POST /results` only when you want a saved result.
- Saved results use a random `result_token`; the public URL is not the internal scan UUID.
- Saved result pages, SVG cards, and evidence packs send `X-Robots-Tag: noindex, noarchive`.
- Saved results expire after 30 days under `explicit_persist_30d`.
- Saved results can be deleted with `DELETE /result/{result_token}` and `Authorization: Bearer {delete_token}`; `X-IfPort-Delete-Token` is also accepted for clients that cannot set Authorization.
- For explicit saved results, the observed source IP is stored in clear text until expiry or deletion so the saved evidence can describe what was observed.

## Contacts

For abuse reports or security issues, contact abuse@ifport.io or security@ifport.io.
General troubleshooting support is not provided for free public scans.