Hosted demo privacy

What a scan may store

Depending on the scan type and enabled scanners, StageFlow may temporarily store:

• Submitted static-site ZIP archives.
• Page URLs, titles, DOM snippets, response metadata, and scanner findings.
• Full-page screenshots and per-finding image evidence.
• Generated HTML and JSON reports.
• Scanner logs and timing/error information.
• Playwright storage state supplied for an authenticated scan.

Do not submit confidential builds, private customer data, production credentials, or sensitive authenticated targets to the hosted demo.

Retention and access

The hosted demo expires staging uploads and ordinary completed scan artifacts after 24 hours. Object-store deletion is asynchronous. Reports promoted as project baselines stay in private persistent storage until replaced or the project is deleted.

The durable job record — submitted URL, scanner configuration, state, and timing — is not automatically deleted in this release. The 24-hour promise applies to uploaded files and ordinary generated object-store artifacts, not database records or promoted baselines.

A job ID is an unguessable bearer-style reference: anyone with the job or report URL may retrieve its status and report until the data expires.

Delete and cancel

Delete this scan removes staging and artifact objects and hides the job from later reads. It does not erase the durable job record. Promoted API project baselines are not deleted by this action.

Cancel scan stops an in-flight job and tears down scanner pods. Cancel does not delete artifacts; use Delete after the job has stopped.

Authentication data

The hosted browser form accepts literal credentials only to support throwaway demo accounts. Never enter a personal, reused, customer, or production password. Prefer a self-hosted stack for any real login.