Legal
Privacy Policy
Template notice: this policy describes how the LaunchSafer software handles data. The operator of this deployment should review it with a legal professional and add their company details and contact address.
What we collect
- The website URL you submit and the publicly available content we fetch from it to produce your report.
- A one-way hash of your IP address, used only for rate limiting and abuse prevention. We do not store raw IP addresses.
- Payment records (Stripe session ID, amount, status). Card details are handled entirely by Stripe and never reach our servers.
- If you use “Email me this report”: the address is used once to send that report. We don't store it; we keep only a one-way keyed hash of it for 24-hour rate limiting, and we never add you to a mailing list.
How reports are protected
Each report is available only through a private link containing a signed access token. Reports are excluded from search engines.
Third parties
- Google PageSpeed Insights receives the URL being audited to measure performance.
- OpenAI (when enabled) receives structured audit results and short excerpts of the audited page to write recommendations.
- Stripe processes payments.
- Resend delivers report emails you request (it receives the recipient address and the email content).
- Supabase hosts our database.
Retention and deletion
Audit records are kept to let you revisit your report. To request deletion of a report, contact the operator of this site with the report link.