Privacy policy

Draft policy template — review and replace with your actual business details before launch.

Information we process

When you create an account, we process account identifiers provided by Firebase Authentication. When you run a scan, we process the website URL, scan status, page metadata, detected issues and report data needed to provide the service.

Website scan data

You can run scans without creating an account. For anonymous reports, the browser stores a private report-access token in local storage so you can reopen the report on that browser. The server stores only a hash of that token, scan metadata, and report findings. Anonymous reports are intended to be retained for up to 30 days; this depends on the hosting provider and the configured Firestore TTL policy. Your browser keeps up to 15 recent report tokens, and clearing browser storage can make those reports inaccessible.

Only scan websites you own or are authorized to analyze. The scanner may request publicly accessible pages and robots/sitemap resources. Do not submit private URLs, credentials, secrets or personal data in scan targets.

Service providers

The application uses Firebase Authentication and Cloud Firestore. Website scans are processed by the separately hosted Next.js server; the hosting provider may process request logs and network metadata. The deployed service may use additional hosting, monitoring, email or AI providers only when configured and disclosed.

Retention and deletion

Signed-in users can delete their account and associated scans from the dashboard. Anonymous scan reports are kept in this browser’s report list and can be removed by clearing the browser’s site data; server copies may remain until the configured retention cleanup runs. Operational backups and hosting logs may follow separate retention periods. Replace this template with your actual retention windows before launch.

Security and contact

We use authentication, server-side authorization and restricted scanner requests. No internet-connected service can promise absolute security. Add your legal business name, support email, jurisdiction and privacy contact before production launch.

Last updated: October 24, 2026. This template is not legal advice.