Privacy

Last updated 19 October 2026. Undefined Labs Pty Ltd runs npryx.dev and the hosted scan service. We collect as little as we can, and we don't sell or share it for advertising. This site sets no cookies and runs no analytics.

The npryx CLI

The CLI sends us nothing unless you turn on remote scanning. When it's on, it sends the name, version and integrity of packages from the public npm registry, never private packages.

What we keep

• Billing: Stripe handles payment and holds your card, name, email and billing address. We keep your Stripe customer and subscription IDs and the subscription's status.
• Your key: we store only a SHA-256 hash of it, never the key itself.
• Scans: results are cached by package, not by person. Request logs (the package requested, time and status) are kept by Cloudflare for a few days to run and debug the service.
• Email: we use your email only to send sign-in links and messages about your subscription.

Who processes it

Stripe (payments), Cloudflare (hosting, logs), and Purelymail (email). Some of them store data outside Australia.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it once you've cancelled (Stripe keeps billing records as tax law requires). We handle personal information under the Australian Privacy Principles. Write to support@npryx.dev.