Privacy Policy

LARP (“LARP”, “we”, “us”) provides a security testing platform for web applications, including applications built with AI coding tools. This policy explains what information we collect when you use our website and scanning service (the “Service”), how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information described here. If you don't agree, please don't use the Service.

Account information. Name, email address, password (hashed), and billing details when you create an account or subscribe to a paid plan.

Application data you submit for scanning. The URLs, repository links, or source code you provide so LARP can run security checks, along with the scan results, findings, and suggested fixes we generate.

Usage data. Log data such as IP address, browser type, pages visited, and actions taken in the product, collected automatically to keep the Service reliable and secure.

Communications. Messages you send us for support, along with any information you choose to include.

• Operate, maintain, and improve the scanning engine and reports.
• Authenticate your account and secure access to your data.
• Send scan results, product updates, and — if you opt in — occasional tips.
• Process payments and manage subscriptions.
• Detect, investigate, and prevent abuse of the Service.
• Comply with legal obligations.

Code, URLs, and reports you submit for scanning are used solely to run the requested checks and generate your report. We do not use your application data to train models or share it with other customers.

Scan reports are retained for as long as your account is active so you can track fixes over time. You can delete a project or your account at any time, which permanently removes the associated scan data within 30 days.

We don't sell your personal information. We share data only with:

• Service providers who host our infrastructure, process payments, or provide analytics — bound by confidentiality obligations.
• Law enforcement or regulators when required by law, or to protect the rights and safety of LARP and our users.
• A successor entity in the event of a merger, acquisition, or asset sale, with notice to you.

We use encryption in transit and at rest, access controls, and regular audits to protect your data. No method of transmission or storage is 100% secure, so we can't guarantee absolute security — but we work to meet the same bar we hold your applications to.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

We use essential cookies to keep you signed in and remember preferences like your theme choice, and limited analytics cookies to understand product usage. You can control cookies through your browser settings.

The Service isn't directed at children under 16, and we don't knowingly collect personal information from them.

We may update this policy from time to time. If we make material changes, we'll notify you by email or through the Service before the change takes effect.

Questions about this policy or your data? Email us at privacy@larp.dev.