Last updated 3 November 2026.
The short version
- We set no tracking cookies and show no cookie banner, because there is nothing to consent to.
- The file fingerprint and roof calculator run in your browser. Files and numbers you enter are not uploaded to or stored by us. HTML you paste into the link preview checker or website lead grader is checked in your browser too.
- When you enter a web address in the link preview checker or website lead grader, our server fetches that one public page, sends its HTML to your browser and keeps nothing. It logs only the site’s host name and the HTTP status.
- Two features talk to other servers, and only when you use them: the link preview checker loads your page’s share image from your server to measure it, and the timestamp certificate sends a salted fingerprint (never the file) to public OpenTimestamps calendars.
- We count visits with Cloudflare Web Analytics, which is cookieless and does not build a profile of you.
Analytics
Cloudflare Web Analytics records page views, referring sites, country and device type in aggregate. It does not use cookies or local storage and does not follow you across sites. See Cloudflare’s description of how it works.
Hosting and security cookies
The site is served by Cloudflare. Like any web host, Cloudflare processes your IP address and request details to deliver pages and block attacks. When it sees unusual traffic, Cloudflare may set strictly necessary security cookies such as __cf_bm (bot management) or cf_clearance (after a security challenge). They are not used for tracking or advertising.
Link preview checker and website lead grader
When you enter a web address in the link preview checker or website lead grader, our server fetches that one public page, sends its HTML to your browser and keeps nothing. It logs only the site’s host name and the HTTP status. It sends none of your cookies or other details to that site, and it refuses private and internal addresses. Pasted HTML never leaves your browser.
To show and measure your share image, your browser loads the og:image and twitter:image URLs from the page directly, the same way it loads any image. That server sees a normal image request from your browser.
Timestamp certificates
When you ask for a timestamp, your browser adds a random 16-byte salt to the file’s SHA-256, hashes it again and sends only that 32-byte value to public OpenTimestamps calendar servers run by independent volunteers. The value reveals nothing about the file. The calendars commit it to the Bitcoin blockchain, which is public and permanent; that is the point of the proof. Your proof file and certificate are created in your browser and are not stored by us.
Roofer quote requests
The “get quotes from local roofers” form is not connected yet. It checks what you type on your device and sends nothing anywhere. Before it goes live, this page will name who receives a request, what is stored and for how long.
Embedded calculator
If a business embeds our roof calculator on its website, the calculator still runs in your browser and sends nothing to us or to that business. That website has its own privacy policy.
Email updates
The updates signup is not open yet and collects nothing. When it opens, this page will say what we store and how to unsubscribe.
StormScope waitlist
If you join the StormScope waitlist, we store your email address, the role you picked, and the company and state if you gave them, plus the date you joined, which version of the consent text you agreed to and, if the link you followed had one, the site that sent you. That is all: not your IP address (it is used for a moment to stop abuse, then dropped) and not your browser details. The list sits in a Cloudflare D1 database that only we can read. We use it only to email you about StormScope, never sell or share it, and delete your entry when you ask through moxisync.com.
Contact
Questions about privacy: reach us through moxisync.com.