Privacy Policy

Last updated: 1 May 2026

1. Who We Are

ChaLess is a bot-detection service operated by Leon Smith. Our service is accessible at https://silent-shield-saa-s.replit.app.

2. Data We Collect

From ChaLess account holders

• Email address and password (hashed) used at signup
• Site domains you register
• Usage logs (allowed / challenged / blocked counts per site)

From visitors on sites protected by ChaLess

When a visitor submits a form on a website that has integrated the ChaLess protect.js script, the following behavioural data is sent to our servers:

• Time spent on the page before the form was submitted
• Time taken to fill in the form
• Whether a hidden honeypot field was triggered
• Browser user-agent string
• A randomly generated session token (not linked to any personal identity)
• IP address (used for rate-limiting only, not stored long-term)

We do not collect, store, or process any form field content — names, email addresses, messages, passwords, or any other data entered by visitors into forms.

3. How We Use Data

• To determine whether a form submission is from a real human or a bot
• To provide account holders with dashboards showing bot-detection statistics
• To improve detection accuracy

4. Data Retention

Verification logs are retained for 90 days and then automatically deleted. Account data is retained for as long as the account is active.

5. Data Sharing

We do not sell, rent, or share personal data with third parties except where required by law.

6. Your Rights

You may request deletion of your account and associated data at any time by emailing smith.leon022@gmail.com.

7. Cookies

ChaLess uses a session cookie for logged-in account holders only. The protect.js script does not set any cookies on visitors' browsers.

8. Contact

For privacy-related questions or data deletion requests, contact us at smith.leon022@gmail.com.