Privacy Policy

Last updated: October 15, 2026

1. What we collect

From you directly:

• Your email address, used to sign you in and to reach you about the product.
• Your agency branding settings: agency name, website, logo, and brand color, used only to render your reports.

From your use of the service:

• The website addresses you submit for audit and the resulting findings.
• Basic activity in your account, like audit status changes you record.
• IP addresses and network identifiers associated with signup and sign-in activity, used to limit abuse and investigate suspicious account creation.
• Email-delivery and security-notification records, used to enforce sending limits and retry failed alerts. We do not include sign-in codes in security alerts.

2. How we use it

We use your data to run the service: signing you in, running audits, rendering reports, and showing your own history back to you. Your email is used to sign you in and to send account and onboarding messages. Security records help us enforce free-account limits, prevent repeated signups and protect the service from abuse. We do not sell your data.

3. Websites you audit

An audit fetches a small number of publicly available pages of the website you submit, once, and stores what it found so your report can be rendered. We do not republish site content. The fetcher identifies itself honestly in every request, and site owners can block it or contact us through the bot page.

4. Storage and security

Data lives in a managed database with access controls, and email delivery runs through an established transactional email provider. Public sign-in uses one-time email codes; some invitations and account-recovery flows use email links. Report share links use long random tokens and only expose the report itself.

5. Sharing

We share data only with the service providers needed to run Your Website Report: hosting, database, email delivery, and internal security notifications. Suspicious-signup alerts sent to our Slack workspace can include an email address, network identifier, and signup counts. Google and Meta receive page visits from our own pages for analytics and advertising (see Cookies). Each provider receives only what it needs. We do not sell or rent personal data to anyone.

6. Retention

Your account data and audit history are kept while your account is active. Ask us to delete your account and we remove your personal data within a reasonable time, except what we must keep for legal reasons.

Signup-network correlation records are pruned after 30 days during subsequent signup checks. Security-alert delivery records are pruned after 30 days by the scheduled worker. Email-limit records use keyed email identifiers and are pruned after 24 hours during subsequent sending checks. Copies in our security-notification workspace follow that workspace's retention settings. These limits do not automatically delete other account or security logs.

7. Your rights

You can ask for a copy of your data, correct it, or have it deleted. Write to us through the contact link below and we will sort it out.

8. Cookies

Your Website Report uses session cookies to keep you signed in. Our own pages on yourwebsite.report also load Google Analytics and the Meta (Facebook) pixel through Google Tag Manager, to see how people use the site and to measure and target our ads. They set their own cookies. They never load on a report or demo page you send to a prospect, or on your own report domain.

9. Changes to this policy

We may update this policy as the product evolves. The date at the top reflects the latest revision.

10. Contact

Privacy questions or requests? Reach us wherever you first heard about this tool.