Last updated: 2026. Applies to valiorisgroup.com and the External Security Snapshot tool.
When you submit the Security Snapshot form, we collect your full name, business email, company name, the domain you asked us to analyze, your IP address, and your browser's user agent. If you tick the optional follow-up box, we also record that you opted in and when. If you write to us through the Contact page, we collect your name, email, and message.
The detailed results of your scan, meaning the specific security findings about your domain, are never written to our database and never shown on this website. They exist only while your request is running, and we email them to you once, to the address whose domain matches the one you asked us to analyze. That match is also how we confirm you're allowed to have the domain analyzed. The only things we keep are your overall score and risk level, for example "72/100, Low", because that is what the optional follow-up emails below refer to.
Every page on this site, not just the scan form, records a basic pageview: which page you looked at, and, if you followed a link, which external site sent you. We host this ourselves. It is never sent to Google, Meta, or anyone else, and it uses no cookies, so nothing is stored in your browser. To count unique visitors without cookies, we take your IP address and browser details, mix in a secret that changes every day, and turn that into a one-way fingerprint. We keep only the fingerprint, never the IP address or browser details themselves. Because the secret changes daily, the same person gets a completely different fingerprint the next day, so visits can't be linked from one day to the next or traced back to you. We also record whether you finished the scan form or the contact form, just that it happened and not what you typed, so we can see whether the tool is useful without knowing who used it.
This site sets no cookies for visitors. It also loads no third-party scripts, fonts, or embeds that might set one. There is no cookie banner because there is nothing to consent to. The only cookie involved is a session cookie that keeps a member of our team signed in to the private admin area. It is strictly necessary for that sign-in to work, it holds no tracking data, and it is never set for regular visitors, so it is exempt from consent requirements under the ePrivacy Directive and Spain's LSSI. If we ever add analytics, video, or scheduling tools that rely on cookies, we will ask for your consent first.
Your name, email, company, IP address, and user agent are encrypted on disk (AES-256-GCM) before they are stored. Your domain and score are kept in plain text, because we need to read them directly to apply the cooldown and rate limits and to produce our own aggregate statistics. We do not sell your data or share it with third parties.
If you tick the follow-up box on the scan form, you'll get up to four emails over two weeks that refer to your own score. Nothing else is shared, and they contain no scan findings, since we don't keep those. They don't go out automatically. Our system reminds someone on our team when one is due and prepares a draft, but a person reads and sends every email by hand. Each one has a one-click unsubscribe link that takes effect straight away. If you leave the box unticked, which is the default, the only email you'll get is the one with your results.
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, at any time. Just write to info@valiorisgroup.com. To stop the follow-up emails specifically, use the unsubscribe link in any of them or simply ask us.
For anything not covered here, contact info@valiorisgroup.com or use our Contact page.