Privacy

No account, and no report address

An account is not needed and none is offered — a scan needs only the address you type. A report is never given a public address, never stored on the server after the request finishes, and never indexed by a search engine. It exists in your browser tab.

What stays in your browser

So that you can compare two scans, a short summary of each scan is saved in this browser: the address, when it ran, the counts, which platforms were detected, and which checks were reported as something to fix. No page content, no response headers, and nothing from inside a finding. It is capped at ten scans, it is never sent anywhere, and you can delete it from the scan screen or from your browser's own settings. Clearing your browser data removes it too.

No analytics, no advertising

This page loads no analytics, no advertising, no fonts and no scripts from anyone else. The only network request it makes is the one you ask for when you run a scan — to this site's own server.

Limits, so the service stays up

Scans are rate-limited per visitor and per website. That is an availability measure, and it applies to everyone equally.