Privacy notice

Last updated 8 August 2026. Written against the Data Protection Act, 2019 (Kenya).

This tool collects no personal data. There is no email field, no account, no cookie and no analytics. You give it a website address, it fetches that site, scores it in memory and shows you the result. Nothing is written down.

Who is responsible

TriqFlow Results, of Nairobi, Kenya, runs this tool. Because we hold no personal data about visitors, there is nothing here for us to be a data controller of. If that changes we will say so on this page before it changes, not after.

You can reach a person about anything on this page on WhatsApp or through triqflowresults.com.

What happens when you run a check

You paste a website address. Our server fetches that address the same way any visitor or crawler would, runs ten checks against what comes back, and returns a score with the findings. The address you typed, the page we fetched and the result we produced all exist only for the seconds the request takes, and are gone when it finishes.

We do not know who you are, and we have no way to find out later. There is no record of your scan to look up, because none was ever created.

What we deliberately do not do

• No cookies. None at all, so there is no banner to click.
• No analytics, no tracking pixels, no advertising tags.
• No email address, name, phone number, company or job title. We never ask.
• No account, no login, no profile.
• No third-party requests. The page loads nothing from anybody else, so nobody else can watch you read it.
• No log of the addresses that get scanned.

The one exception, and it is temporary

We hold your IP address briefly in memory, purely as a counter, so that one person cannot run the tool thousands of times and take it down for everyone else. It is never written to disk, it is never attached to anything else, and it is discarded within minutes.

Where that counts as personal data, the lawful basis under section 30 of the Act is our legitimate interest in keeping a free public tool available and not trivially abusable.

Who else sees anything

Nobody, because there is nothing to see. We do not sell data, we do not rent it, and we do not pass anything to advertisers or data brokers. The company that hosts the server can see traffic reaching it, as any host can, and processes nothing of ours beyond that.

The site you scan

One thing worth saying plainly: we only ever read pages that are already public. We request them exactly as any visitor or crawler would. We never log in, never submit anything, never write, and never touch anything behind a password. A score is a judgement about a website, not about a person.

Your rights

The Act gives you the right to know what an organisation holds about you, to have it corrected or deleted, to object to its use, and to withdraw consent. All of those apply to data that exists. We hold none, so there is nothing to disclose, correct or delete, and no consent to withdraw.

If you want to satisfy yourself of that, ask us and we will explain exactly how the tool works. You can also complain to the Office of the Data Protection Commissioner at odpc.go.ke if you think we have got this wrong.

Automated decisions

The score is generated automatically, but it is a judgement about a website, not about a person, and it has no legal or similarly significant effect on anyone. We do not profile you and we make no automated decisions about you.

If you talk to us

If you message us on WhatsApp or email us about an audit, that conversation is ordinary business correspondence and we keep it the way we keep any client correspondence. That is separate from this tool, which still collects nothing. This notice covers the tool.

Changes to this notice

If we change it, we change the date at the top. If we ever start collecting something, which today we do not, we will publish the change here before it takes effect rather than quietly editing a line.