The platform runs scheduled scans of the pages you add, in a browser with nobody logged in, and keeps what it stores encrypted and access-controlled. The Chrome extension, a side tool for checking one page, is invisible to the sites you review and keeps scans in your browser until you choose to sync them.
How scheduled scans handle your pages and data.
Scheduled scans open the pages you add, in the languages you choose, in a real browser with nobody logged in. They read the rendered text and capture screenshots of the page. Pages behind a login aren’t scanned; the Chrome extension can check those while you’re signed in.
Your account, workspaces and projects, the findings, the text read from scanned pages, and screenshots of those pages. Scans run on servers in Germany. Stored data is kept with the hosting providers listed in our Privacy Policy.
Screenshots and the text read from pages are deleted after 90 days by a daily cleanup job. Need a shorter period, no screenshots, or sensitive areas blurred? Ask us and we’ll set it for your workspace.
Workspace roles: owner, admin, billing admin, member and viewer. Access to each project (owner, admin, write or read) can be given to a person, a team or a role. You can sign in with Google. SAML or OIDC single sign-on isn’t available. API keys work for one project each, can be revoked, and are stored only as a hash.
All traffic uses TLS, with HSTS. Our storage providers encrypt data at rest. Tokens for tools you connect to the platform are encrypted with AES-256-GCM, API keys are stored as SHA-256 hashes, and webhooks carry a timestamped HMAC-SHA256 signature you can verify.
The services that process data for us, and what each one receives, are listed in our Privacy Policy.
Our Privacy Policy explains what we collect, why, and how long we keep it. To have your data deleted, email info@loqalit.com.
Sites you review can’t detect the extension.
Extension scans and screenshots stay in your browser until you choose to sync them.
Every request uses a fresh short-lived session token.
Page text is treated strictly as data. A page that says “ignore your instructions” gets reviewed, not obeyed.
If you find a security issue in Loqalit, email info@loqalit.com with the details.
Running a security review? Request a demo and we’ll walk your team through how scans work.
Start with a free QA report. We scan your live site in up to 3 languages and email you the findings with screenshots, MQM severities and suggested fixes.