Last updated 2026-09-26
Your email and name when you create an account; the domain you scan and the public content of that site; scan results; billing details handled by Stripe (we never see card numbers); usage events on our site (pages viewed, scans run) through PostHog; IP addresses stored only as one-way hashes for security and abuse prevention.
To run scans, generate and publish your fixes, bill you, send your weekly report, detect abuse, and improve the product. We do not sell personal data. Your site content is never used to train AI models.
Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (email), PostHog (analytics), and the AI providers we query with generated questions (Anthropic, OpenAI, Perplexity, Google). Questions sent to AI providers never include your personal data.
Account data is kept while your account exists. Delete your account from the account page; data is removed within 30 days. Free-scan results are kept for 90 days.
Access, correction, export and deletion on request. EU and UK residents have rights under GDPR; California residents under CCPA. Write to us from your account email.
Session cookies for sign-in, a language preference, a partner referral cookie (60 days) when you arrive from a partner link, and PostHog analytics.