Privacy

When you scan a site

We store the scanned URL, the findings, the scores, the roast, the time, your country (from our hosting provider's geo header) and a salted one-way hash of your IP address, used only to enforce rate limits. We do not store your IP address or browser details, and we do not store the scanned page's HTML or any personal data found on it.

When you buy a report

Payments are handled by Stripe, our payment processor. We receive and store your email address (to send your private report link) and the order ID. We never see your card details.

When you ask us to fix things

We store the email and message you send through “Fix it for me”, only to reply to you.

Roasts of your site

Roasts are public and shareable but kept out of search engines. Site owners can remove them and opt out: remove a roast.

Processors

Vercel (hosting), Neon (database), Upstash (rate limiting), Anthropic (writing roasts from scan data), Google PageSpeed Insights, Stripe (payments), Resend (email).