Privacy policy

Last updated: 27 October 2026

Who we are

Artemis is operated by Team Artemis. This policy covers the Artemis website at artemissecure.co.in and the Artemis Site Check browser extension, and explains what information they handle.

What we collect

• The domain, link or UPI payment link you enter. We use it only to run the scan you asked for. A UPI link or UPI ID is checked on our server from the link alone and isn't sent to any other service.
• Your IP address. We hold it in server memory, not on disk, to limit how many scans and sign-in attempts each visitor can make, and discard it once it's no longer needed for that. Our web server also records it in an access log, together with the time and the page requested. We delete access log entries after 14 days. Our hosting provider may keep its own network records under its own policy.

You can use Artemis without an account. If you choose to create one, we also keep:

• Your email address and password. The password is stored only as a salted scrypt hash, so we can't read it. We use your email address only for account emails: the link to confirm it, password-reset links, and notices when someone tries to sign up with it or your password changes. We never send marketing.
• If you use "Continue with Google": Google tells us your email address and an ID for your Google account, and nothing else (we ask only for your email). We use the ID to recognise you next time. Google learns that you signed in to Artemis, under Google's own privacy policy. An account made this way has no password unless you set one with "Forgot password".
• Your settings (theme and how sites open), so they follow you to other devices.
• Your scan history: the domains and links you scanned while signed in, with their results and times. We keep your most recent 200 scans.

We keep these until you clear your history or delete your account, which you can do at any time in Settings. Deleting your account removes all of it straight away. If an account's email address is never confirmed, we delete the account after 7 days.

Account emails are delivered through our email provider, which receives your email address and the message so it can deliver it. Links in these emails work once and expire after 24 hours (confirmation) or 1 hour (password reset).

Everything the site needs, including its fonts, is served from our own server. Your browser doesn't connect to any other service while you use Artemis, unless you follow a link: to a scanned site, to Google when you choose "Continue with Google", or to one of the official reporting sites we list when you report a site.

What we don't do

• We don't use analytics or advertising trackers. The only cookies are the one that keeps you signed in for up to 30 days, set only if you sign in and removed when you log out, and, while you sign in with Google, one that ties the sign-in to your browser and expires within 10 minutes.
• Your settings and your last 5 searches are saved in your browser's local storage and never leave your device. To remove the searches, choose "Clear" in the list under the search bar.
• We don't save scans made while signed out. Each result is sent to your browser and not stored on our server.
• We don't sell or rent personal information.

Site reports

If you report a site or UPI ID, we store the address you reported, the reason you chose, any note you add, the time, and your account if you're signed in. We don't store your IP address with it. Team Artemis uses reports only to review the sites reported. We don't publish them or pass them on. We delete reports after 12 months. If you delete your account, reports you sent are kept but no longer linked to you. Please don't put personal information in the note.

Services we contact during a scan

To check a domain, our server contacts the services below. They receive the domain you scanned and our server's IP address, not yours.

• The website you scan. We connect to it over HTTPS and load its homepage, the page you linked to if you pasted a link, and its favicon. We also open that page in an isolated browser on our server and let its scripts run, so the page may in turn contact other services it uses, the same way it would in your browser.
• Our hosting provider's DNS resolver, to look up the site's address, and Cloudflare (1.1.1.1) and Google (8.8.8.8) public DNS, to read its email and certificate authority records.
• rdap.org and the registry responsible for the domain, for its registration date and registrar.
• SSLMate Cert Spotter, and crt.sh if Cert Spotter is unavailable, for the domain's certificate history.
• Google Safe Browsing and abuse.ch URLhaus, if they are enabled on this site.

We also download OpenPhish's public list of phishing sites, and the favicons of well-known brands from their official websites so we can spot copies. Both are downloaded without reference to your scan, so OpenPhish and those brands don't learn which domains you check.

Browser extension

Artemis Site Check does nothing until you turn on warnings. When they're on, it sends the domain of each site you open (not the full address, page content or anything you type) to our server, which checks it against phishing lists, registration records and known brand names. We don't store these domains or connect them to you or your account. Each domain's result is kept on our server for up to 6 hours, and in your browser until you close it, so the same site isn't checked repeatedly. Checks from the extension appear in our access log like any other request, without the domain.

Your rights

Depending on where you live, you may have the right to ask for access to, correction of or deletion of personal information we hold about you. If you have an account, you can clear your history or delete your account yourself in Settings. For anything else, email artemis_secure@gmail.com.

Children

Artemis is not directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If we change how Artemis handles information, we'll update this page and the date at the top.

Contact

Questions about this policy: artemis_secure@gmail.com.