Privacy

What we read

When you submit a URL we fetch only the public homepage HTML, /robots.txt, /sitemap.xml and check whether the declared og:image loads. We do not execute the site's JavaScript, crawl other pages, log in, or scan for security issues. Local, private-network and internal addresses are rejected.

What we store

• No accounts, no report history. Your report lives in your browser session only.
• Share links contain a signed snapshot (domain, scores, top-fix IDs, timestamp) encoded in the URL itself. Nothing is stored server-side, and opening a share link never re-scans the site.
• Rate limiting uses a counter with a one-hour expiry kept in your browser.
• Launch checklist ticks are saved in your browser's local storage.

Analytics

We record aggregate, anonymous counts only (scans started, reports produced, share clicks). No cookies for tracking, no personal identifiers, no IP-based profiles.

Email subscription

Subscribing is optional and separate from grading — the full report is never gated behind an email. If you subscribe, your address is handled by our newsletter provider with double opt-in, and every email has an unsubscribe link.

Contact

Questions or a mis-graded site? Reach out to @GuyZhong.