Security & Privacy
Questions about data security, privacy, and compliance.
What data does SilentShield collect?
SilentShield collects behavior telemetry (mouse movements, typing cadence, scroll patterns) during the session. It is evaluated in real time and deleted after your plan's retention period. The IP address is processed only for the check and is not stored in plain text; SilentShield does not collect names, email addresses or form contents.
Does SilentShield use cookies?
No. SilentShield sets no cookies. Only if a transmission fails does the widget keep the measurements in the tab's session storage (sessionStorage) until it sends them again; they expire when the tab is closed.
Where is my data stored?
Data is stored on our servers in Germany. Through the EU endpoint the check also runs directly there, with no CDN in between; we deliver the website and dashboard through Cloudflare. All API communication is encrypted (TLS 1.3).
Is SilentShield GDPR compliant?
Yes, SilentShield can be used in a GDPR-compliant way. We do not use cookies, do not track users across websites and do not store IP addresses in plain text. The check runs on our servers in Germany. A data processing agreement (DPA) is available in the dashboard to every registered account.
Can SilentShield see form data?
No. SilentShield only analyzes behavior patterns (how users interact with the page). It does not read, transmit, or store any form field values.
How is my API key protected?
API keys are tied to specific domains. Even if someone copies your key, it will only work on your registered domain. You can rotate keys instantly from the dashboard if needed.