Privacy Policy

We collect what a scan needs to run and what an account needs to work. Nothing goes to Google Analytics or Sentry unless you accept cookies, and you can change that answer at any time.

When you run a scan we store the URL you submitted, the pages and links we found behind it, and the IP address the request came from. The IP is there to rate-limit anonymous scans and to block abuse.

Results are deleted automatically, on a schedule that depends on the plan:

• Anonymous scans — 24 hours.
• Free accounts — 1 hour, except the latest completed scan of each saved site, kept as a baseline so the next scan has something to compare against.
• Pro — 90 days. Agency — 365 days.
• Failed scans — 1 hour.
• A report you paid for — kept, so the page you bought does not vanish overnight.

One summary row per scan outlives that cleanup: the site URL, the date, how many pages and links were found, and — for anonymous scans — the IP address. We use it to measure usage and to spot abuse. The IP address is erased from it after 30 days; the rest of the row stays.

An account holds your email address, a hashed password, your language, your plan, the sites you saved and how often they are scanned. We keep it for as long as the account exists.

You can delete the account yourself, under Settings in the dashboard. It erases the account, your sites, your scans and their results, and takes your address off our mailing lists; an active subscription is cancelled at the same time. Scan statistics stay without your address or IP, and the receipt for a paid report stays without your identity, because accounting rules require us to keep it. If you would rather we did it, write to [email protected].

We send account emails (verification, password reset, billing), broken-link alerts, and a recurring digest of your sites — weekly on a paid plan, monthly on the free one — if you leave it on. Both can be switched off in your dashboard settings, and every alert email carries a one-click unsubscribe link that works without signing in.

If you gave us your email address to receive a scan report without creating an account, we send a short series of follow-ups. Each one has its own unsubscribe link. Unsubscribing stops the emails; it does not delete your data.

We record a short, fixed list of product events on our side: an account was created, a scan was started, a report was opened, a checkout began. Each row holds the event name, the account it belongs to (or, for an anonymous visitor, the scan token), a few properties such as the plan or the number of pages, and a timestamp. No browser identifier, no cookie — which is why these are recorded whether or not you accept cookies. They are deleted after 12 months.

We set no cookies of our own. The site keeps a few values in your browser's local storage: your theme, your sign-in token if you have an account, your cookie choice, the channel you first arrived from, and the last URL you scanned. Those stay in your browser.

Two third-party scripts load only if you accept:

• Google Analytics 4 — page views and page-speed measurements. It sets its own cookies.
• Sentry — JavaScript error reports, so we hear about a broken page before you have to tell us. It receives the page URL, your browser and the error's stack trace.

Sentry used to load for everyone, consent or not. It no longer does. If you decline, neither script is fetched, and any error held in memory while we waited for your answer is discarded.

You can change your mind at any time: the Manage cookies link in the footer brings the banner back, and declining after having accepted clears the analytics cookies.

Scans themselves run on our own servers. Beyond that, these companies see something:

• Cloudflare hosts the website and runs the Turnstile anti-bot check on the scan forms, so it sees requests to the site and may set its own security cookies.
• Stripe handles payment. Card details are entered on Stripe's own page — we never see or store a card number.
• Google Analytics and Sentry, as described above, and only after you accept.

We do not sell your data and we run no advertising trackers.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected]. A person reads it and answers.