The short version
- No accounts, no sign-up, no analytics and no advertising trackers.
- We store the reports you generate. Anyone with a report's link can open it, and recent reports are listed publicly.
- Your IP address is used briefly, in memory, to rate limit requests. We don't write it to our database.
- Don't put confidential or personal information into a dev team audit.
What we collect
Site audits
When you scan a URL, we store the address you entered, where it redirected, and the full report: the page's public metadata, scores, findings, the technologies we detected, and the request and response details we measured. All of it comes from the public website. Nothing in it identifies you.
Dev team audits
A dev team audit stores the answers you give: a team or company name, the technology stack and versions, delivery and process figures, team size, and up to a few sample project URLs. Each sample URL is scanned and stored as a site audit. Only enter what you're happy to have stored and shared through the report link.
Technical data
Our servers read your IP address to apply rate limits (2 site scans and 20 team audits per minute). These counters live in memory and expire within about a minute. Our hosting provider may keep standard request logs, such as IP address, time, and path, for security and operations.
Who can see a report
Each report gets a random ID in its URL. Anyone who has the link can open it, download it, re-run it, or delete it. The most recent reports also appear on the Site Audit and Dev Team Audit pages. Report pages ask search engines not to index them.
Stored in your browser
We don't set cookies. We use your browser's local storage for:
tech-auditor-theme: whether you chose the light or dark theme.tech-auditor:site-progress:*andtech-auditor:team-progress:*: which fixes you ticked off on a report.
This data never leaves your device. You can clear it at any time in your browser settings.
Third parties
We don't sell data. We use these services to run Tech Auditor:
- Neon hosts the Postgres database where reports are stored.
- Google PageSpeed Insights may receive the URL being scanned, to return Lighthouse and Chrome UX Report data.
- endoflife.date receives the technology names from a dev team audit, so we can check support dates. It receives no other details.
- Our hosting provider runs the application and handles its network traffic.
If your site was scanned
Scans are read-only. They identify themselves with the TechAuditorBot user agent, fetch a small sample of public pages, and read files such as robots.txt, sitemaps, DNS records, and the TLS certificate. We don't log in, submit forms, or try to get past access controls. About TechAuditorBot covers what it requests and how to opt out. To have a report about your site removed, open it and delete it, or contact us.
Retention and deletion
Reports stay until someone deletes them. Use the delete button on the report, or send us the report link and we'll remove it. Deleted reports are removed from the database straight away and are no longer available at their link.
Your rights
Depending on where you live, you may have the right to access, correct, or delete personal data about you, or to object to how it's processed. Because we don't run accounts, the quickest route is usually to delete the report yourself. For anything else, contact us and we'll respond within 30 days.
Changes
If what we collect or how we use it changes, we'll update this page and the date at the top.
Contact
Questions or removal requests: ny8.dev.