Privacy

No accounts, no cookies, no analytics scripts, no advertising. Nothing here identifies you.

Last updated 4 September 2026.

No cookies, and nothing that acts like one

This site sets no cookies. It runs no analytics script, no tracking pixel, no advertising tag, and no third-party embed of any kind. It does not use local storage or any other browser storage to follow you between visits. There is no cookie banner because there is nothing to ask you about.

Every page is plain server-rendered HTML that works with JavaScript switched off. You can check all of the above by viewing source.

What is stored when a site is scanned

  • The URL and its report. The address you entered and the report we produced are saved so that the next visitor — or a search engine — reads a stored result instead of triggering a fresh scan of someone else’s server. Reports are re-run when they get stale.
  • A daily counter per URL. How many times a report was viewed, and how many of those needed a live scan. It is one row per address per day, and it holds nothing else.

Report pages are public and are meant to be shared, so treat anything you scan as public. See the terms for what that means in practice.

What is deliberately not stored

We do not record your IP address, your browser or operating system, your country or location, the page you arrived from, or any identifier that could connect one visit of yours to another. The counter described above cannot describe a person, by design.

Two honest exceptions, neither of which is a record of you:

  • Abuse protection. The JSON API, the report pages and the share-card images count requests per IP address for sixty seconds at a time, in memory only, to stop one client flooding a free endpoint. It is never written to disk and is gone when the server restarts.
  • Ordinary server logs. Like any web server, our hosting stack may write short-lived request logs that include IP addresses. They are not used to build a profile of anyone and are not combined with anything else here.

When you scan someone else’s site

The fetch happens from our server, not from your browser. The site you scan sees a request from us and never sees you. We request only publicly reachable pages, follow the same redirects any client would, and read nothing behind a login.

Fonts and other assets

Fonts and images are served from this domain. Nothing is loaded from a content delivery network, a font service, or any other third party, so no other company sees your request.

Your rights, and getting in touch

Because nothing stored here identifies you, there is normally no personal data of yours to access, correct or delete. If you believe a report about a site you operate should be removed, or you have a question about any of the above, get in touch and we will deal with it.

Contact