A record nobody was keeping
The EU's Chat Control derogation makes scanning private messages voluntary, so each provider decides for itself, and where that decision becomes public at all, it becomes public as a small edit to a policy page. Nobody was keeping that record, and it cannot be rebuilt later: a reading taken on 26 July can only be taken on 26 July.
So it is taken every day. ScanRecords reads 96 documents across 31 platforms and the EU's own pages (privacy policies, encryption pages, the providers' own filings under the derogation) along with 25 App Store privacy labels and 29 Google Play declarations, and commits any change in wording with its full before and after. The daily run has not missed a day since it started.
Hash the words, not the page
Each capture keeps the raw page as evidence, but the comparison runs on the extracted text, so a rebuilt page or a reshuffled menu never becomes a headline. Google Play reorders its data safety declarations on every request, so those are put into a canonical order before they are compared.
Reading the web from Europe
The first test run, from GitHub's American servers, recorded 40 changes that were not changes: Google and Meta serve different text in different regions. An archive about European scanning has to read the web from Europe, so every fetch now goes out through a relay pinned to Paris. The bad data was reverted with new commits rather than erased, by the archive's own rules.
Not crying wolf
A failed read is not an edit. Meta's privacy page once came back empty, and that went out as a change. Now a capture that collapses to nothing can never overwrite a good one, and a record that turns out to be false is withdrawn with a visible correction instead of deleted: it keeps its page and its address. Everything is recorded, but only changes that are more than page furniture are announced.
The machine did its job
On 30 July the daily run caught the European Parliament's file for the derogation's extension changing to “Final act published in Official Journal”: Regulation 2026/1881. The next day the site's central claim was re-sourced from a procedure file and a news article to the regulation itself.
Observations, not conclusions
The red label is reserved for the five providers the European Commission itself names as filing scanning reports under the derogation. Scanning under US law is shown apart. Where the archive is silent, it says so, because the absence of a statement is a fact about the public record, not about anyone's software.
The site is in five languages, sets no cookies and runs no analytics. The code is MIT and the data it produces is in the public domain.