Privacy policy

The free scan

When you scan a site, our scanner reads that site's public pages: the home page, robots.txt, llms.txt, the sitemap and up to five inner pages. We save the site address, its score and the full report so the report can be shown again and compared on a later scan. Each report gets a random link, and anyone with that link can open it.

To stop abuse we limit scans to 8 an hour per connection. For that we save a one-way hash of your IP address mixed with a secret value. We do not save your IP address itself.

The market part of the report looks up the social profiles linked on the scanned site, its public YouTube feed, and for a business with a street address, nearby competitors. To find them, the address published in the site's own markup is sent to OpenStreetMap's Nominatim and Overpass services, and the competitor sites found are given a short scan. All of this is public information about the scanned business, not about you.

The contact and plan forms

When you send a message on our contact page or ask for a free plan on the home page, we save what you type: your name, email, business name or website, phone (only if you give it), the services you tick, your message, and the scan you came from with its score. It goes to our own dashboard, and we use it to reply to you about your site. We do not sell it or add you to a mailing list.

Payments

If you hire us, we may send you a payment link. You pay on Stripe's own checkout page, so your card details never reach our server. We keep a record of the payment: your name, email, what it was for, the amount, its status and Stripe's reference for it. Stripe handles the payment under its privacy policy.

Cookies and analytics

Visitors get no cookies from us. The only cookie we set is the sign-in cookie for the site owner's dashboard, which lasts up to 12 hours. Failed sign-in attempts are counted by the same hashed IP described above.

We use Cloudflare Web Analytics to count page views. It runs a script from Cloudflare that reports page visits to Cloudflare. We run no advertising pixels or ad tracking.

Where your data is kept

The site and its database run on Cloudflare's network. Cloudflare sees each request to serve it, including your IP address, under its privacy policy.

How long we keep it

We do not delete records on a schedule today. Scans, messages, payment records and hashed IPs stay in our database until we remove them. If you want your message or a scan of your site removed, ask us and we will delete it.

Your choices

You can scan without giving us any personal details. To see, correct or delete what you sent us, contact us. Our site is for business owners and is not meant for children.

Changes

When this page changes, the date at the top changes too. See also our terms of service.