Who we are
DepTriage is operated by WPSani.store (VAT no. 12343720012). For any privacy-related question, contact us at support@wpsani.store.
What data we process
- Lockfiles you upload (
package-lock.json,yarn.lock,requirements.txt,go.sum, etc.) are parsed in memory and discarded after the response is generated. They are never written to disk and never sent to a third party. - IP address — used solely to enforce the free-tier rate limit (3 scans per day). Stored in a counter table, deleted automatically after 30 days.
- License key — generated and emailed to you after a paid purchase. Used to authenticate your scans.
- Email address — collected only at checkout (handled by Stripe, see below) to deliver the license key.
- Anonymous usage analytics (Plausible) — page views, no cookies, no personal data, EU-hosted.
- Session recordings (rrweb) — anonymised replays of how visitors interact with the page (clicks, scrolls, form interactions on non-sensitive fields). Recordings never include the contents of uploaded lockfiles. Used to detect UX problems and bugs. Recordings are deleted after 30 days.
What we do NOT do
- We do not store your lockfiles.
- We do not sell, rent, or share data with third parties for marketing.
- We do not use cookies for advertising or cross-site tracking.
- We do not require user accounts or passwords.
Third-party processors
| Provider | Purpose | Data |
|---|---|---|
| Stripe (Ireland / US) | Payment processing | Card data, email, billing address |
| Namecheap Private Email | Sending the license key | Email address |
| Plausible Analytics (EU) | Anonymous traffic analytics | URL path, country, device class |
| DigitalOcean (Frankfurt) | Hosting | Request logs (kept 14 days) |
Your rights (GDPR)
If you are in the EU/EEA you have the right to access, rectify, erase, restrict, and port your personal data. Email support@wpsani.store with your license key and we will respond within 30 days.
Data retention
- License keys: kept while the license is active, plus 10 years for accounting (Italian/EU law).
- Free-tier IP counters: 30 days (cleaned up automatically).
- Server logs: 14 days.
- Session recordings: 30 days, then deleted.
Changes
We update this policy when our processing changes. The "last updated" date at the top will reflect that. Material changes will be announced on the homepage banner.