citeranksecurityevery figure read off https://citerank.thecompound.tech/api/stats on 13 September 2026
last answer 2026-09-12Check one question freeFree check
232answers recorded
5 engines answered from, of 5 asked
25 free checks answered for strangers
2026-09-12 last answer, the day before the capture
every question re-asked every 7 days
one row is one question asked of one engine once

Security

What this product stores, who else processes it, and what it does not have.

Accounts

no password, no login form

The dashboard token is the only credential this product issues. There is no password, no login form and no session route in this tree, and npm run check re-reads the route tree and fails this page if one ever appears.

What it stores

4 kinds of record
  • An email address, only if you type one into a form, and only for the thing that form does.
  • Anonymous page analytics with the IP address truncated before it is stored.
  • The brand and the buyer questions you ask us to track, so the weekly probe can run.
  • An email address on a purchase, so the weekly report can be delivered.

Who else processes it

5 named
Vercelhosting and edge delivery; request logs. their policy
Supabasethe database the probe queue and the accounts live in. their policy
PostHogproduct analytics, IP-truncated. their policy
Resenddelivering the transactional mail this product sends. their policy
Stripepayment. Card details are entered on Stripe hosted Checkout and never reach this site. their policy

Anything else true of this posture

  • Every page on this site is rendered from stored reads and public data; there is no user generated content another visitor can see.
  • The whole estate runs on one Supabase project with row level security on, and this product has its own tables.

This page is served at /security. https://citerank.thecompound.tech/s/security redirects to it.