SECURITY

Privacy is a product boundary, not a marketing claim.

CheckBefore uses browser-local processing for standard scans, so original files do not need to leave your device.

Application controls

The application uses security headers, input validation, file size limits, and defensive parser error handling. Payment secrets and webhook verification remain server-side.

Fair-use controls

Trial access is checked against an account, an HttpOnly device identifier, and privacy-preserving HMAC hashes of network and email signals. CheckBefore does not store raw IP addresses or browser fingerprints for this purpose.

Limits that stay visible

File formats can contain structures that cannot be safely changed automatically. CheckBefore reports those items for review instead of reporting false success.