Effective Date: November 12, 2026 | Operator: TyLabs (tylabs.com / Malware Tracker), Ontario, Canada
?store=false)
northamerica-northeast2 Residency
Malware Tracker (“Malware Tracker”, “we”, “us”, or “our”), operated by TyLabs in the Province of Ontario, Canada, provides the Document Malware Analysis Server, QuickSand stream unpacking engine, AI/RAG Prompt-Injection Firewall, and Threat Intelligence API at malwaretracker.com and api.malwaretracker.com (collectively, the “Services”).
We collect, use, and protect personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5), applicable privacy legislation in the Province of Ontario, and Canada’s Anti-Spam Legislation (CASL).
We maintain a strict architectural separation between our authenticated B2B/B2D REST API and our public community web scanner:
| Submission Channel | File Retention Behavior | Metadata & Telemetry |
|---|---|---|
REST API Zero-Retention ModePOST /v1/scan?store=false (Default)POST /v1/triage |
Zero File Retention. Uploaded documents are unpacked and inspected strictly in ephemeral volatile memory (RAM) in ~40ms and immediately discarded upon response completion. Files are never written to disk or cloud storage. | Only aggregate API key quota counters and non-content scan metrics (timestamp, elapsed ms, verdict rating) are logged for billing and rate-limiting. |
REST API Opt-In StoragePOST /v1/scan?store=true |
When explicitly enabled by the API caller, the sample and decoded stream report are cached in our Toronto, Ontario cloud storage bucket to enable subsequent hash queries. | Cryptographic hashes (MD5, SHA1, SHA256, SHA512), YARA rule hits, CVE mappings, and stream telemetry are indexed. |
| Public Web Scanner malwaretracker.com Dropzone |
Samples uploaded to the unauthenticated public web scanner may be retained and indexed for security research, signature validation, and public hash lookup (/search.html & /report.html). | Cryptographic hashes, structural stream telemetry, YARA/AI safety findings, filename, and submitting IP address are recorded for abuse prevention and threat intelligence. |
Important Notice for Confidential Documents: Do not upload documents containing confidential personal information, Personal Health Information (PHI under Ontario’s PHIPA or U.S. HIPAA), or regulated financial records to the unauthenticated public web dropzone. Always use the authenticated REST API with default ?store=false zero-retention execution for production and sensitive workflows.
sub), display name, and profile picture URL from Google solely to authenticate your session and provision your API keys.mt_session) when you sign in via Google OAuth.
Primary application databases (Google Cloud Firestore) and object storage buckets (Google Cloud Storage) for Malware Tracker are hosted in the Toronto, Ontario, Canada (northamerica-northeast2) region on Google Cloud Platform.
All data in transit is encrypted via TLS 1.2/1.3, and all persistent account records and stored threat telemetry are encrypted at rest using AES-256. Access to production infrastructure is restricted to authorized personnel using hardware-backed multi-factor authentication and least-privilege IAM roles.
We do not sell, rent, or trade your personal information. We share limited data only with trusted infrastructure providers necessary to deliver the Services:
malwaretracker.com.Under PIPEDA and applicable provincial privacy laws (as well as GDPR and CCPA where applicable to international users), you have the right to:
If you have an unresolved privacy concern, you also have the right to contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.
For privacy inquiries, data access or deletion requests, or compliance verification, please contact the TyLabs / Malware Tracker Privacy Officer:
TyLabs — Malware Tracker Privacy Office
Jurisdiction: Province of Ontario, Canada
Email: privacy@malwaretracker.com / info@tylabs.com
Web: https://tylabs.com | X/Twitter: @mwtracker