What is kept, and what is not

Every audit is recorded, whether or not you are signed in. A record holds the tool you used, the URL you scanned or the type of business you described, the score, and a summary of the verdicts. That is what lets us see which checks people actually use.

For an anonymous run, the record holds nothing that identifies you: no name, no email address, and no IP address. It cannot be tied back to you, by us or by anyone else.

The marketing audit is scored on your own device. The numbers you type live inside the share link, after the # symbol, and that part of a link is never sent to a server. Only the summary of the result is recorded, as above.

If you sign in, we hold your email address and the audits you chose to keep, so you can see them again and compare runs over time. Sign-in is by a link sent to your email or through Google; we never hold a password.

Signing in changes nothing about the audits themselves. Every result is complete without an account.

When you scan a URL, our own fetcher reads that page, its robots.txt and sitemap, and up to ten more pages linked from it. It identifies itself as LapaasAuditBot, refuses private addresses, and reads at most two megabytes per page. Nothing is sent to a third-party service.

A copy of the report is cached for 24 hours so a shared link opens quickly. The cache is keyed by the URL alone.

A message from the contact form goes to an inbox as an email and nowhere else. It is not added to the audit database or to any list.

Write to us through the contact page with the email you signed in with, or the URL you scanned, and the matching records are deleted. Anonymous runs carry nothing that could identify yours, which is the point of keeping them that way.