Privacy Policy

Your privacy matters to us. This policy explains what SiteMerit does — and does not — collect when you use our website and audit service.

1. What SiteMerit does with the data you submit

SiteMerit audits publicly accessible websites. When you submit a URL, our engine retrieves and analyzes the public page at that address to generate your audit report. We store the operational data needed to process your audit and deliver your report — for example, the audit results, the score, the engine version, and the report reference. We keep this only as long as needed to provide and support the service. We do not operate a "no-storage" or "stateless" service: your audit results are stored so that your report remains available to you through a permanent, shareable link. The URL you submit is stored as you submitted it, because it is what identifies the audited page. For a paid audit we also keep, in private storage, what our servers and a browser observed on the page (headers, HTML, the files it loaded, screenshots and performance measurements), and delete it automatically 30 days after it is written; the paid report itself carries no expiry. To write the analysis and the fix guide in a paid report, the audit's findings, with excerpts of what was observed on the page, are sent to our AI analysis provider, and the text that comes back is stored with your report. To provide the service we rely on payment processing, e-mail delivery, AI analysis and cloud hosting providers. These providers may process data in the United States.

2. What we do not collect

SiteMerit does not require an account or registration to run an audit, and we do not build a profile of you. If a public page or URL you submit happens to contain sensitive information (for example, credentials exposed on the page), that exposure originates from the audited website and is the responsibility of its owner — not of SiteMerit.

3. Cookies and page events

The site sets only functional cookies: one that remembers the language you chose (NEXT_LOCALE, kept for one year) and, after checkout, delivery tokens that let the browser that paid open its report. Your choice in the consent banner is kept in your browser's local storage, not in a cookie. If you accept, we record page events (which page was opened and which of our links and buttons were used) on our own servers; the recorded event carries no cookie, no IP address and no visitor identifier. If you decline, no page event is recorded. We do not display advertising, and we do not use advertising cookies or ad-personalization networks on this site.

4. Payments

Payments are processed by an established third-party payment provider. Your payment details are handled by that provider under its own security and privacy terms; SiteMerit does not store your full card details. The e-mail address you enter at checkout is used to send you the report.

5. Our approach to data-protection law

We design our practices to align with applicable data-protection principles, including data minimization and purpose limitation. We do not sell, rent, or trade personal data. Because the audit does not require login or registration, we do not process account-based personal data from visitors. (This section states our approach; it is not a certification of legal compliance.)

6. Contact

Questions about how we handle data and privacy: privacy@sitemerit.com.