Privacy

What we collect

• Contact form and message widget: your email address, your message, and the page you sent it from. Stored so we can reply, and so the reply has context.
• Free scan: the URL you submit. The result is cached for 15 minutes against that domain so a shared result link does not re-fetch the site. We do not attach it to you.
• Deep-report request: your email, optionally your name, the URL you scanned and its score.
• Server logs at the CDN edge: IP address, user agent and requested path, recorded by Cloudflare as our host and retained on their standard schedule. This is how we see which AI crawlers read the site, because crawlers do not run JavaScript and no analytics script can see them.
• Page analytics: the page you viewed, its title, the page that referred you, your browser language, and the country your connection came from. Sent to Google Analytics so we can see which pages are worth writing more of. No cookie is set and no advertising identifier is created.
• A random session id, stored in your browser's sessionStorage so a visit counts as one visit rather than eight. It is not a cookie, it is never sent to anyone but us, and your browser discards it the moment you close the tab. Nothing links one visit to the next.

What we do not do

• We do not sell or rent your data to anyone.
• We do not add you to a mailing list because you used the scanner. You get a reply to what you asked, and nothing else unless you ask for it.
• We do not embed third-party chat, session recording or advertising scripts. Not one byte of JavaScript on this site is served by anyone but us, which is both a privacy position and the thing we sell.
• We do not build a profile of you across visits. There is no persistent identifier, so we cannot tell a returning visitor from a new one, and we have chosen to keep it that way.

Who else handles it

• Cloudflare hosts the site and the database your message is stored in. They also record the edge server logs described above.
• Resend delivers the notification email that tells us you wrote in. Your address and message pass through them to reach us.
• Google Analytics receives the page analytics described above. Note what does NOT happen here: your browser never talks to Google. Our own server forwards the page view, so Google is not handed your IP address and cannot set a cookie on you. That is the whole reason we built it this way instead of loading Google's script.
• That is the complete list. No advertising network, no CRM, no data broker, and no session recording.
• If you book a call, that happens on Cal.com (our account is on their EU instance, cal.eu) and is covered by their privacy policy rather than this one. We only see what you choose to put in the booking form.

Deletion and access

Email us and we will send you everything we hold about you, or delete it, within 30 days. There is no form to fill in and no account to close: one email is enough.

If you are in the UK or EU, our lawful basis for holding your message is legitimate interest in replying to an inquiry you initiated.