Privacy Policy
Last updated: March 15, 2026
1. Data Controller
SiteCheckup ("we", "us", "our") is the data controller for personal data collected through sitecheckup.dev. For any privacy-related inquiries, contact us at sitecheckup@gregoiregeoffroy.com.
2. Data We Collect
We collect the following categories of personal data:
- Account information: Email address provided during registration.
- URLs audited: Website URLs you submit for analysis.
- Audit results: The results generated from scanning your URLs.
- Usage data: Pages visited, features used, audit frequency, and browser type.
- Payment information: Processed by Paddle (see section 5). We do not store payment card details.
3. Purpose of Data Collection
We use your data to:
- Provide and improve the audit service
- Manage your account and subscriptions
- Enforce usage limits and prevent abuse
- Send transactional emails (audit results, account updates)
- Analyze usage patterns to improve the product
4. Legal Basis (GDPR)
We process your personal data based on: (a) contractual necessity to provide the Service, (b) your consent where applicable, and (c) our legitimate interests in improving and securing the Service.
5. Third-Party Services
We share data with the following third-party processors:
- Paddle.com Market Limited: Payment processing, invoicing, and tax compliance. Paddle acts as Merchant of Record and processes your payment information directly. See Paddle's Privacy Policy.
- Supabase: Authentication and database hosting. Stores account data and audit results.
- Vercel: Application hosting and edge deployment.
6. Cookies
We use essential cookies for authentication and session management. We use a local storage preference for theme selection (light/dark mode). We do not use advertising or tracking cookies.
7. Data Retention
Account data is retained as long as your account is active. Audit results are retained for 12 months. Upon account deletion, your personal data is deleted within 30 days, except where retention is required by law.
8. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request erasure of your personal data
- Restrict or object to processing
- Data portability
- Lodge a complaint with a supervisory authority
To exercise these rights, email sitecheckup@gregoiregeoffroy.com.
9. Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.
10. Children
The Service is not intended for children under 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.
12. Contact
For privacy-related inquiries, contact us at sitecheckup@gregoiregeoffroy.com.