Before you send the link

No. It is one file, it runs once, and nothing stays behind. They will have to approve the Windows administrator prompt - the check reads system records that are not readable otherwise - and accept the consent screen that lists exactly what is collected.

Most likely yes. The file is not code-signed yet, so SmartScreen may show a "Windows protected your PC" notice and some antivirus tools flag it, because reading another process's memory looks like what a cheat does. Warn the player before you send the link, so the warning does not turn into an argument.

The list of findings and the report itself: file names, hashes, paths, timestamps and the system summary. The contents of personal files are never uploaded. The player sees this on the consent screen and can decline, in which case nothing runs.

Not by accident and not easily. Each download is built for one check with its own key, a report without that key is rejected, and a check accepts exactly one result. A result that could not have happened - finished faster than the file was downloaded, or a verdict that contradicts its own evidence - is marked next to the report. Someone determined can still tamper with a program running on their own PC, which is why every finding comes with the record behind it rather than a verdict you have to take on trust.

Exactly like this sample, which is a real report generated from invented data. Five sections, a verdict with the reasoning behind it, and every finding backed by the record it came from - browser history, execution traces, deleted files, loaded modules.

Plans renew at the end of each term until you turn renewal off - one click on the Billing page, and the term you already paid for keeps running to its end. The 24-hour key never renews. When a plan ends, old reports stay readable and you can still sign in; creating new checks is what stops.