Terms of Service

ChillScan runs a passive, external check of a public URL: it loads the page and its first-party JavaScript the way a normal visitor's browser would, then reports on exposed secrets, security headers, HTTPS and cookies, SEO and performance. It does not log in, attack, or try to break into anything.

The free scan shows your scores and the names and severity of your top issues. The Deep Scan is a one-time $12 payment that unlocks the full report for one URL: every finding with an explanation, a fix tip and a copy-paste AI fix prompt. It is not a subscription.

Only scan websites you own or have permission to test. Don't use ChillScan to harm, overload or spy on anyone else's site, and don't try to get around rate limits or abuse the service. We may block use that looks abusive.

Payments are processed by Stripe; we never see or store your card details. After paying you're sent to your report page. Keep that link: it's how you get back to your report, and it is also shown on the checkout page.

If something went wrong with your Deep Scan (it didn't load, you lost the link, or it didn't work for your site), email chillscanapp@gmail.com with your receipt and we'll sort it out, including a refund where that's the fair fix.

ChillScan is an automated checklist, not a professional security audit or penetration test. It can miss problems and can flag things that turn out to be fine. A clean report doesn't mean your site is secure. The service is provided "as is", without warranties of any kind, and you're responsible for any changes you make to your site based on it.

To the extent the law allows, we aren't liable for any indirect or consequential losses arising from using ChillScan, and our total liability to you is limited to the amount you paid us for the Deep Scan in question.

We may update these terms; the date at the top shows when they last changed. These terms are governed by the laws of North Carolina, USA.

Questions? Email chillscanapp@gmail.com.