Privacy Policy

Last updated: June 1, 2026

This Privacy Policy explains how Danger Close Security Co. (“Danger Close,” “we,” “us,” or “our”) collects, uses, and protects information when you use CandyWrapper—our websites, mobile applications, and link- and QR-code-scanning services (the “Service”). By using the Service, you agree to this Policy.

1. Information We Collect

• Links and QR payloads you submit. When you scan a link or QR code, we receive the URL or payload so we can analyze it. We may retain it to deliver and improve security results.
• Scan results and metadata. Threat assessments, timestamps, and related technical details generated by our pipeline.
• Technical data. IP address, device and browser type, and similar diagnostic information, used for security, rate limiting, and abuse prevention.
• Account information. If you create an account, your email address and authentication credentials (passwords are stored only as salted hashes).
• Usage data. Aggregate, non-identifying analytics about how the Service is used.

2. How We Use Information

• To analyze links and QR codes and return safety assessments;
• To operate, maintain, secure, and improve the Service;
• To prevent fraud, abuse, and security incidents;
• To provide account features and respond to your requests;
• To comply with legal obligations.

3. Third-Party Threat Intelligence

To assess a link, we may transmit the URL or derived indicators (such as a domain or hash) to trusted third-party security providers, which may include Google Safe Browsing and VirusTotal. These providers process the data under their own terms and privacy policies. We share only what is necessary to evaluate a link’s safety and do not sell your personal information.

4. How We Share Information

We do not sell your personal information. We share information only:

• With service providers and infrastructure partners who help us operate the Service, bound by confidentiality obligations;
• With threat-intelligence providers as described above;
• When required by law, legal process, or to protect the rights, safety, and security of our users or the public;
• In connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention

We retain information for as long as needed to provide the Service, maintain security and abuse history, comply with legal obligations, and resolve disputes. Scan data may be retained in aggregated or de-identified form for analytics and to improve detection. We delete or anonymize data when it is no longer needed.

6. Security

We use technical and organizational measures—including encryption in transit, access controls, and hardened infrastructure—to protect your information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at privacy@candywrapper.app. You may also delete your account at any time from within the app.

8. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

9. International Users

We may process and store information in the United States and other countries. By using the Service, you understand your information may be transferred to and processed in jurisdictions with different data-protection laws than your own.

10. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where practicable.

11. Contact

Questions about your privacy or this Policy? Contact us at privacy@candywrapper.app.