Last updated 25 August 2026
Privacy
The short version: we store the URL you asked us to test, the findings, and your email address if you bought something. We do not use cookies for tracking and there is no advertising network on this site.
What we store
- URLs you submit and the findings produced from them.
- Your email address, if you buy a report — it comes from Stripe at checkout and is how the report reaches you.
- A salted hash of your IP address for rate limiting. The address itself is not written down, and the hash cannot be reversed to recover it.
- Page views and a few product events — which pages were visited, whether a scan was started, whether an order completed. These are stored on our own server against a per-day, per-browser hash that is not linked to any identity and rotates every 24 hours.
What we do not do
- No advertising or analytics cookies, and no third-party trackers. That is why there is no cookie banner — there is nothing to consent to.
- We do not sell or share data with anyone for marketing.
- We do not log in to your site, submit forms on it, or read anything behind authentication.
Who else touches your data
- Stripe processes payments and holds your billing details. We receive your email address and the amount paid. We never see the card.
- Resend delivers our email, so it processes your address and the message contents.
- Our server is hosted with a commercial provider. Nobody else has access.
How long
- Free scan results: 30 days. The salted address hash attached to them goes at the same time.
- Reports and orders: two years, so a link you shared keeps working and so we can answer questions about a past order.
- Page views and product events: 13 months, which is long enough to compare a month with the same month last year.
- Rate-limit hashes: within the hour. They are only held in memory and never written down.
Deletion is automatic and runs several times a day. It is not a promise somebody has to remember to keep.
Marketing email
Buying a report does not sign you up to anything. If we ever send anything that is not about your order, every message will carry a working unsubscribe link, and unsubscribing will never affect a report you paid for.
Your rights
Email support@sitepunchlist.com to get a copy of what we hold about you, correct it, or have it deleted. We will do it within 30 days. If you are in the UK or EU, you also have the right to complain to your data protection authority.