What we keep, and what we do not.
Short, because there is not much to say. We collect two things and we sell neither.
What we collect
Exactly two things, both of which you type in yourself:
- Your email address, so you can log back in and so we can send you your report.
- The website addresses you ask us to scan, so your reports stay attached to your account.
Your password is never stored. What we store is a one-way hash of it, which cannot be turned back into your password — not by us, not by anyone who obtained the file.
We do not ask for your name, your phone number, your company, your address or your industry. None of it would change the scan.
What we do not do
- We do not sell your data. Not to agencies, not to anyone.
- We do not share it with third parties for marketing, and we do not run advertising trackers on this site.
- We do not add you to a mailing list. There is no newsletter to unsubscribe from.
- We do not phone you. We never ask for a phone number, so we could not.
Cookies
One cookie, named dms_session. It keeps you logged in and contains nothing but a signed reference to your account. It is not readable by JavaScript, is not shared with anyone, and expires after 30 days.
There is no analytics cookie and no advertising cookie, which is why this site has no cookie banner — there is nothing to consent to. Your light or dark theme preference is kept in your browser’s own storage and never sent to us.
Scanning a website
When you ask us to scan an address, we request that page the same way any visitor’s browser does. We do not log in to anything, we do not submit your forms, and we do not collect personal data belonging to your customers from your site.
You should only scan a website you own or are responsible for. See the terms.
How long we keep it
Until you delete it. Your account and every scan attached to it can be deleted from your dashboard in two clicks. That removes the record immediately and we hold no backup copy to restore it from — which also means we cannot undo it for you afterwards.
Your rights
You can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email hello@doctormysite.com and we will action it within one business day. You do not need to give a reason.
This is handled in line with Singapore’s Personal Data Protection Act. If you are unhappy with how we have responded, you may raise it with the Personal Data Protection Commission.
Security
The site is served over HTTPS, passwords are hashed with scrypt, and session cookies are signed so they cannot be forged. No system is perfectly secure, and we would rather say that plainly than claim otherwise.
If this changes
If we ever start collecting something new, this page changes first and the date below changes with it. We will not quietly broaden what we collect and leave the policy as it was.
Contact
Questions about any of this go to hello@doctormysite.com, or WhatsApp +65 8900 8796. DoctorMySite, Singapore.
Last updated 12 August 2026