Privacy Policy — How We Protect Your Data

1. Data We Collect

We collect: your email address (for authentication), IP address (for rate limiting and anonymous analysis matching), website URLs you submit for analysis, audit results and scores, and payment information processed securely by Stripe. For backend audits, server configuration data is collected temporarily via the probe.

2. How We Use Your Data

We use your data to: provide and improve the audit Service, generate reports and track score progression, process payments, send transactional emails (magic links, alerts), and detect abuse. We never sell your data to third parties.

3. Data Storage & Security

Your data is stored on secure servers in the European Union. We use encryption in transit (TLS) and at rest. Access to production systems is restricted and monitored. Probe data is processed in memory and not stored beyond the analysis duration.

4. Cookies

We use strictly necessary cookies for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics. No cookie consent banner is needed as we only use essential cookies.

5. Third-Party Services

We use Stripe for payment processing and Browserless for headless browser operations. These services have their own privacy policies. We do not share your audit data with any third-party service.

6. Your Rights

Under GDPR, you have the right to: access your personal data, correct inaccurate data, request deletion of your data, export your data in a portable format, and object to processing. To exercise these rights, contact us at legal@whymysitesucks.com.

7. Data Retention

Audit results are retained as long as your account is active. Anonymous (non-account) audit data is retained for 30 days. Upon account deletion, all personal data is removed within 30 days. Anonymized aggregate statistics may be retained indefinitely.

8. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be notified via email. The "last updated" date at the top indicates when this policy was last revised.

Contact

For any questions about these terms, please contact us at legal@whymysitesucks.com.