Privacy Policy

Last updated 28 July 2026

Short version: we never store the content of the pages you scan. We keep the minimum needed to issue your licence and count your AI generations. There are no analytics scripts, no advertising pixels, and no third-party trackers on this site.

1. Scanning a page

How your page data is handled depends entirely on which mode you use, and the difference is real rather than cosmetic:

• Paste-HTML mode makes no network requests at all. The HTML you paste is parsed and analysed by JavaScript running in your own browser. It is never transmitted anywhere. You can verify this yourself with your browser's network tab open.
• URL mode sends the address you typed to our server, which fetches that public page and its stylesheets and passes them back to your browser, where the analysis runs. This step exists only because browsers cannot read another website's HTML directly. We do not store the fetched page, its stylesheets, or the findings. The content passes through memory and is discarded when the request ends.

Findings, reports, and downloads are assembled in your browser. We never see them.

2. AI fix generation (Pro only)

When you ask the AI to write fixes, we send only the specific HTML elements that failed a check — not your whole page — plus the page title, declared language, and meta description for context. This is deliberate: it keeps both the cost and the exposure small.

That request is processed by Anthropic (the Claude API) as our subprocessor. We do not use your content to train anything, and we have no ability to.

Of each generation we retain only metadata: the hostname scanned, how many findings were sent, token counts, our cost, and success or failure. We do not retain the elements sent, or the fixes returned. Once your browser has them, we don't have them.

3. Buying a licence

• Payment is handled entirely by Stripe. Your card number never reaches our servers and we never see it. Stripe's own privacy policy governs their handling of your payment data.
• When your payment completes we store: your email address (as given to Stripe), your licence key, the Stripe checkout session and payment identifiers, and a running count of AI generations purchased and used.
• Your licence key is derived from your email address. It contains no other personal information.

4. Stored in your browser, not by us

Your licence key and remaining generation count are kept in your browser's localStorage so the tool knows you have Pro. This is not a cookie, it is not sent to us automatically, and clearing your browser data removes it — your key still works, you just paste it in again.

5. Server logs

Our host, Cloudflare Pages, records ordinary request data such as IP address, timestamp, and user agent, as any web server does. We also record a coarse rate-limiting counter keyed to a hashed request identifier, which expires automatically. We do not build profiles from either.

6. Who processes what

Data is stored in the United States. We do not run advertising networks, sell data, or share it with anyone beyond the processors above.

7. Retention

Licence records are kept while the licence is valid, and afterwards as long as needed for tax and accounting purposes. Generation metadata is kept for cost accounting. Page content and generated fixes are never stored, so there is nothing to retain or delete.

8. Your rights

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Deleting your licence record will deactivate your key, so we will confirm before doing it. Reply to your Stripe receipt to make a request.

9. Children

This is a tool for people who run websites. It is not directed at children and we do not knowingly collect data from them.

10. Changes

We will update the date above when this policy changes.

11. Contact

Vantage Curation. Reply to your Stripe receipt to reach us.