Privacy Policy

Last updated: 2026-05-25

This privacy policy explains what data SiteX-Ray collects, why, and how to delete it. We try to keep it short and honest.

What we collect

Data	Why	Kept how long
Your email address	To deliver your audit report	Stored by our email provider (Resend) until you ask us to delete it
The URL you submitted	To audit it	Not stored after the report is generated
The audit report we generated	To deliver it to you	Sent to your email, not retained server-side
Your IP address	Bot protection (via Cloudflare)	~30 days of Cloudflare logs
Payment info (only paid customers)	To process the $39 charge	Stored by Lemon Squeezy — we never see your card

We do not use cookies for tracking. The only cookies that may be set are technical ones from Cloudflare Turnstile (anti-bot) — these have no marketing or analytics purpose.

Who we share data with

Cloudflare — hosts the site, runs the backend, provides bot protection, and runs the open-weight AI model that generates most audits. The scraped page content is processed in Cloudflare's edge network and not retained after the response. See Cloudflare's privacy policy and Workers AI privacy notes.
Anthropic — for the paid $39 tier, we may send your submitted URL plus the scraped page content to Anthropic's API to generate a higher-quality report. Per Anthropic's privacy policy, API inputs are not used to train their models.
Resend — we use Resend to deliver your report by email. See Resend's privacy policy.
Lemon Squeezy — handles payments and is the merchant of record for paid customers. See Lemon Squeezy's privacy policy.

We do not sell your data. We do not share it for marketing. We do not have an ad partner.

Your rights

If you're in the EU (GDPR), UK (UK GDPR), or California (CCPA), you have the right to:

Know what data we hold about you
Request a copy of it
Request deletion
Object to processing
Lodge a complaint with your local data-protection authority

Everyone else has these rights too — it's just polite.

To exercise any of these, email ernest2011kostevich@gmail.com. We respond within 7 days.

International transfers

Our infrastructure providers operate globally. Your data may be processed in the US, EU, or other regions. All processors we use offer Standard Contractual Clauses for EU data transfers.

Children

SiteX-Ray is for businesses. We don't knowingly collect data from anyone under 16. If you believe a child has submitted data, email us and we'll delete it.

Changes

If we change this policy, we'll update the date at the top. Material changes will be announced to existing customers by email.

Contact

SiteX-Ray
Email: ernest2011kostevich@gmail.com
Built by an indie operator — not a corporation.