Privacy Policy

What this covers

This policy applies to Website Health Monitor (“the service”), including the public scanner, saved reports, monitoring, and billing. It applies whether you use the service as a signed-in account holder or as a guest running a single scan without an account.

Information we collect

• Account email address. Used to send magic-link sign-in emails and account-related notifications. We do not use passwords.
• Scanned URLs and report data. The website address you scan, the resulting scores, issues, and AI-generated suggestions. Signed-in scans are saved to your account so you can revisit them; guest scans (run without signing in) are not saved anywhere after the report is returned to your browser.
• Session and rate-limit cookies. A signed session cookie keeps you signed in. A separate, non-identifying cookie is used to enforce the one free guest scan per visitor and is not tied to an account.
• Billing information. Payment details are handled entirely by Stripe; we do not receive or store your card number. We keep a record of your subscription status and billing history as provided by Stripe.
• Basic usage analytics. Page views via Vercel Analytics, which does not use cookies or collect personal data for that purpose.

Who processes this data

We use a small number of subprocessors to run the service:

• Google PageSpeed Insights: the scanned URL is sent to Google to generate performance, accessibility, SEO, and best-practices measurements.
• OpenAI: scan results are sent to OpenAI to generate the written summary, prioritized actions, and conversion suggestion included in each report.
• Resend: used to deliver magic-link sign-in emails, monitoring alert emails, and org invite emails.
• Stripe: used to process payments and manage subscriptions for the Pro plan.
• Vercel: hosting, and basic, privacy-preserving traffic analytics.

How long we keep data

Saved reports and account data are kept for as long as your account exists. You can request deletion of your account and its associated data at any time (see “Contact” below). Guest scan reports are never persisted, so there is nothing to delete beyond the short-lived rate-limit cookie, which expires automatically.

Your choices

You can run a scan without an account. You can delete saved reports and monitoring targets from your dashboard. You can unsubscribe from monitoring emails from your account settings, or stop weekly monitoring entirely by pausing or removing the monitoring target.

Contact

For privacy questions, data deletion requests, or anything else covered by this policy, email us at websitehealthmonitor.app@gmail.com.