At ShellDetector, we are keenly aware of the trust users place in us and our responsibility to protect the privacy of user information. As part of this responsibility, we make public what information we collect when someone uses our products and services, why we collect it and how we use it to improve user experience and security industry products.

Collection and use of submitted files, URLs and personal information

Information we collect to provide you with the services includes:

• The files and URLs you upload for antivirus/web-shell scanning.
• Device information: We may collect device-specific information (such as your hardware model, operating system version, unique device identifiers).
• Log information: When you use our services we may automatically collect and store certain information in server logs. This may include: details of how you used our service; Internet protocol address; device event information such as crashes, system activity, hardware settings, browser type, standard HTTP request headers, including but not limited to user agent, referral URL, language preference, date and time; and cookies that may uniquely identify your browser or your ShellDetector Account.
• Cookies and Local Storage: We use various technologies to collect and store information when you visit the website, and this may include sending one or more cookies or randomly generated identifiers to your device. A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. Cookies may store user preferences and other information. The "help" portion of the toolbar on the majority of browsers will direct you on how to prevent your browser from accepting new cookies, how to command the browser to tell you when you receive a new cookie, or how to fully disable cookies. However, some part of our website features or services may not function properly without cookies. We may also collect and store information using mechanisms such as browser web storage (including HTML5) and application data caches.

How we use information we collect

We use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new services, and to protect our users.

When you contact ShellDetector, we may keep a record of your communication to help solve any issues you might be facing. We may use your email address to inform you about our services where you have agreed to this. We may also send you administrative messages.

ShellDetector processes personal information on servers in many countries around the world. We may process, transfer and/or store your personal information on a server located outside the country where you live. When we do so ShellDetector will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Information we share

When you submit a file to ShellDetector for scanning, we may store it and share it with the anti-malware and security industry (normally the companies that participate in ShellDetector receive files containing virus/web shells samples that their engines do not detect and are catalogued as malware by at least one other engine). The samples can be analysed by automatic tools and security analysts to detect malicious code and to improve antivirus engines.

Files, URLs, comments and any other content submitted to or shared within ShellDetector may also be included in premium private services offered by ShellDetector to the anti malware and ICT security industry, with the sole aim of improving research activities, expecting it to lead to an overall safer internet and greater end-user protection.

In addition, we may also share your information in the following circumstances:

• For external processing. we provide personal information to our affiliates or other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.
• For legal reasons. We will share personal information with companies, organisations or individuals outside of ShellDetector if we believe that access, use, preservation or disclosure of the information is reasonably necessary to:
  • meet any applicable law, regulation, legal process or enforceable governmental request.
  • enforce applicable Terms of Service, including investigation of potential violations.
  • detect, prevent, or otherwise address fraud, security or technical issues.
  • protect against harm to the rights, property or safety of ShellDetector, our users or the public as required or permitted by law.

We may share aggregated, anonymised information publicly and with our partners - like the anti-malware and security industry. For example, we may share information publicly to show statistical trends about the general use of our services.

In the event that ShellDetector is involved in a merger, acquisition or asset sale, we may disclose your personal data to the prospective seller or buyer of such business or assets.

You should not share files, URLs, comments or any other content with ShellDetector unless you have authority to share it.

Information security

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Your Rights

We will let you know if we plan to process your personal data for marketing purposes when we collect it. You can change your mind at any time by contacting us at [email protected].

Application

Our website may, from time to time, contain links to and from the websites of our partners and members of the ShellDetector Community. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Enforcement

We will regularly review our compliance with our Privacy Policy. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we cannot resolve with our users directly.

Changes

Any changes we may make to our Privacy Policy in the future will be posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please feel free to contact us at [email protected].