Your privacy, in plain English

Free scans (SiteGraded Light)

• The website address you enter, so we can scan it.
• Your IP address, held briefly in server memory to limit how many free scans one visitor can run in an hour. It isn't written to a database.
• Scan results are sent to your browser and not stored on our servers.

Free Pro accounts

• Your email address and password, handled by our sign-in provider (Supabase). We never see your password.
• A log of the scans you run (the website address, the type of scan, the time, and a one-way scrambled version of your IP address). We use it to apply the daily scan limit and to look into misuse, such as scans of sites the account holder isn't allowed to test.
• Scan results are sent to your browser and not stored on our servers. Scan history is kept only in your own browser so you can compare scans, and you can clear it at any time from the History panel.
• Whether you agreed to receive email updates, when, and the exact wording you agreed to. This box is never ticked for you, and you don't need it to use Pro.

Email updates (only if you opt in)

• If you tick “Email me SiteGraded tips, new features and offers”, we add your email address to our mailing list, which we send through Mailchimp.
• Every email has an unsubscribe link. You can also switch updates off in the Pro scanner at any time, and we remove you from the list before our next mailing.
• We don't sell or share your email address with anyone else.

Contact form

• Your name, email address, the topic, your message and any website address you add, so we can reply.
• A one-way scrambled (hashed) version of your IP address and your browser type, to spot spam. We don't store your actual IP address.

Visiting the site

• Our hosting provider (Vercel) records standard request information, such as IP address, browser type and the page requested, to deliver the site and protect it from abuse.

We don't use advertising or analytics cookies. The site uses your browser's storage only for things that make features work:

• Pro sign-in: a sign-in token, kept in your browser until you sign out.
• Pro scan history: a summary of past scans, kept in your browser until you clear it.
• Human check on the contact form: Cloudflare Turnstile may use its own storage or cookies to tell people from bots. It isn't used for advertising.

We use a small number of service providers, each only for the job described:

• Vercel: hosts the website and runs the scans.
• Supabase: Pro accounts, the scan log and contact-form messages, in a database hosted in the United States.
• Mailchimp (Intuit): our email list, only for people who opt in to email updates.
• Cloudflare Turnstile: the human check on the contact form and Pro sign-up.

We don't share your information with anyone else unless the law requires it.

• Free scan results: not kept.
• Rate-limit counters: about an hour, in server memory only.
• Contact messages: until we no longer need them to help you, or until you ask us to delete them.
• Pro account: while your account is active. Ask us to delete it at any time.
• Pro scan log: while your account is active, and deleted with it.
• Email list: until you unsubscribe.
• Hosting logs: for a limited time, under Vercel's own policies.

A scan visits the website you enter, the same way a browser does. The site's owner may see those visits in their logs. Light identifies itself as “SiteGradedLight”.

Only scan sites you own or have permission to test. If you own a site and have questions about scans of it, get in touch.

• Ask for a copy of the information we hold about you, or for it to be corrected or deleted.
• Clear Pro scan history from the History panel, or by clearing this site's data in your browser.
• Turn email updates on or off in the Pro scanner, or use the unsubscribe link in any email.
• Ask us to delete your Pro account, its scan log and your consent record.
• Use the free scan without creating an account or giving us any personal details.

To make a request, contact us and mention “privacy” in your message.

If we change how we handle information, we'll update this page and the date below.