The short version: everything runs in your browser. No account, no email, no tracking. Your API key stays on your device.
Your AI API key
When you paste an API key in Settings, it is saved only to your browser's localStorage. It never touches our server. When you run an audit, your browser calls your chosen AI provider (OpenAI, Groq, OpenRouter, Ollama, etc.) directly.
AI agent test drive
When you use the Deploy Lead Agent panel on a report, the auto-drafted system prompt and every chat message you send are POSTed directly from your browser to your chosen AI provider using your own key. The conversation never touches our infrastructure. Close the tab and it's gone - we don't persist it.
Fetching the target website
To read the HTML of the site you want audited, your browser calls a small stateless proxy on our edge (/api/fetch-html). This exists only because browsers block cross-origin fetches. The proxy stores nothing, logs no bodies, and has no database attached.
Your reports
Every report you generate is stored in your browser's localStorage. We don't have a copy. Clearing your browser data deletes them permanently - export the PDF of anything you want to keep.
Cookies & analytics
No third-party analytics, no advertising cookies, no fingerprinting. If we ever add basic privacy-first analytics (aggregate page views only), we'll update this page first.
Emails to us
If you email [email protected] (for support or to book paid work), your message is stored in the inbox for as long as needed to reply and keep a record of the engagement. Not shared, not sold.
Contact
Privacy questions or a data request: [email protected].