CitePulseTry the free toolFor codebase buyersPrivacy & data

Privacy & data handling

Implementation-based notice for the current CitePulse browser tool and these static information pages. Updated 7 November 2026. This is not a certification of security or legal compliance.

HTML stays in the tool's browser memory

The current tool processes pasted HTML, local HTML/TXT files, draft fields and imported work files in browser memory. Its application code does not upload these inputs, call a model API or crawl the page URL you enter. Supplied HTML is parsed in a detached template and is not activated as a live page.

The application includes no analytics or advertising scripts, tracking pixels, cookie writes or localStorage persistence. This statement is about the reviewed application, not your device, extensions, operating system or the hosting provider.

Hosting requests are different from tool inputs

Opening the hosted site or downloading a file requires an ordinary request to Run402 hosting. Network and hosting providers can receive ordinary request metadata such as IP address, browser information, requested path and time. We have not independently verified their log retention, subprocessors or deletion controls. No promise of anonymous access or zero provider logging is made.

The dated offline HTML tool can perform its local operations without a network connection in a compatible browser. Following external links, sending email or downloading additional files may use a connection. This notice does not cover other websites, legacy archives or third-party services.

Downloads are not encrypted

Reports, drafts and saved work files are local, explicit downloads. Work files can contain your original inputs and are not encrypted. Keep them private; do not use sensitive material on a shared or compromised device. Clearing the tool resets its interface and memory state, but does not delete downloads, email, browser history, caches or operating-system backups.

Enquiries are voluntary email

Mail links open a draft in your mail application and do not send automatically. If you choose to send, the email address, content and attachments you provide are handled by your and the recipient's email providers. The public contact address is hosted in Gmail. Correspondence can be used to answer your question or discuss the scope you requested; it is not submitted through the local analysis tool.

Do not send passwords, wallets, keys, identity documents, confidential HTML or customer records in an initial enquiry. No automatic mailing-list enrolment is implemented here. We do not promise a fixed correspondence-retention period or immediate erasure from provider systems or backups.

Questions and requests

The project uses AI assistance. For questions about this notice or correspondence you sent, contact mahsakhany02@gmail.com. Do not include sensitive evidence until an appropriate, lawful process is agreed. No identity verification or account deletion is performed by this page.

خلاصه: کد ابزار ورودی‌ها را آپلود نمی‌کند؛ ولی بازکردن سایت و دانلود، درخواست عادی به میزبان ایجاد می‌کند. فایل‌های ذخیره‌شده رمزگذاری نمی‌شوند. ارسال ایمیل اختیاری است و اطلاعات آن از سرویس ایمیل عبور می‌کند. دربارهٔ لاگ میزبان یا امنیت کامل دستگاه تضمینی داده نمی‌شود.

Request portal: separate server-side handling

The free browser checker still keeps its inputs local. The optional orders.html portal is different: when you choose Send request, your email, brief page purpose, question, chosen service and consent are sent to this project's Run402 server/database so the owner can review and respond. Do not include confidential files or customer records.

A 256-bit access key is generated in your browser; the server stores its SHA-256 hash. Possession of the key permits viewing this request, its private instructions and delivered plaintext report. It is not verified identity or end-to-end encryption. Keep the key private; no automatic email recovery or email notification is provided. The portal does not use cookies, analytics or browser storage.

Status access expires after 30 days from creation. Expiry prevents portal access; it does not guarantee physical deletion from server storage, logs or provider backups. Contact mahsakhany02@gmail.com using the reference, not the access key, for correction, cancellation or deletion questions. No immediate deletion or response deadline is guaranteed. Ordinary hosting/network requests and provider logs still apply.

Exact quote, acknowledgement, owner approval, submitted transaction reference and manually reviewed report may be stored against the request. For an owner-approved unique-amount invoice, a status lookup can compare its transaction hash with independent public chain services (Base public RPC / PublicNode, or TonAPI / Toncenter). Only public-chain transaction data are queried; no email, report, access key or operator credential is sent to those services. Proof and allocation records can be stored privately to prevent replay. This is read-only: no wallet connection, signature, debit or automatic refund. Unique amounts include a discount below 0.001 token and are never reused for a second invoice. Checks are triggered by status retrieval/private operator checks, at most once per 30 seconds per approved invoice. Separate authenticated durable server maintenance is scheduled every 15 minutes and examines up to three already approved pending invoices per run, even when pages are closed. A fixed owner-only operational digest is attempted at most once per UTC day when real pending requests exist after this feature is enabled. It contains only a queue count, no customer email, request text, access code, HTML or report; it uses the existing project mailbox under a conservative free-quota guard, with no automatic upgrade or wallet payment. Send outcomes are stored privately; an ambiguous send is not automatically resent. There is no automatic customer email or guaranteed inbox arrival/response time. A local access-file download is optional, unencrypted, explicitly confirmed and never uploaded; clearing this page does not erase that file. The open visible page may refresh for up to 10 minutes, at most 20 automatic checks; pause or clear it at any time. Receipt matching does not approve lawful eligibility or generate a custom report. Legacy fixed-amount invoices still need manual attribution. Custom work and delivery remain owner-reviewed; uploading confidential HTML requires a separately agreed private route and handling terms. No wallet keys, login passwords or identity documents belong here. No blanket legal-compliance or comprehensive security certification is claimed.

The lang query parameter carries interface language between supported pages, not customer inputs or access codes. No form data are added to the URL.