Privacy & boundaries.
We're building a practical site diagnostic service, not an opaque data collection product. Here's what this prototype does and does not do.
Live website audits
When you submit a domain, our server requests publicly accessible HTTPS resources from that site: the homepage, /robots.txt and /sitemap.xml. We parse selected response headers and webpage metadata. We do not authenticate, bypass access controls, brute-force endpoints or test vulnerabilities. The server must resolve the submitted hostname to a publicly routable IP address before connecting.
The backend may output basic request/access logs (including client IP and domain path) in its host environment. We do not ship third-party advertising pixels or analytics in this starter. Before launching commercially, publish accurate hosting, retention, controller and contact information.
Browser-only tools
The AI crawler policy debugger and email policy clinic run in your browser using JavaScript. Their input text is not sent to our server by the tools. Avoid pasting confidential or sensitive records on any shared computer.
Limitations
Our live audit samples only a few public resources and selected HTTP headers. It does not determine whether Google or ChatGPT actually indexed, ranked, cited or recommended your website. It is not a penetration test or guarantee of website security. Email checks are limited to pasted SPF/DMARC syntax and cannot validate DKIM or real mail delivery.
Payments
This version does not accept payments or process donations. Support and feature request links open your email client. A future commercial release will require updated terms and privacy disclosures.
Contact
Questions or correction requests: [email protected].