Privacy policy
Privacy policy
The data controller is [Your full legal name, or company name and number], [Your business address]. Contact: [Contact email, e.g. hello@yourdomain]. We collect as little as we can: you don't need an account, and we don't use advertising or tracking cookies.
What we collect and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Links, page text and screenshots you submit | To read the course page and produce your report | Contract, or legitimate interests for free checks | Screenshots aren't stored by us. See the next row for page text. |
| A dated copy of the checked page text, the link, the course name, the verdict and a reference | To show what a page said at the time if a report is ever questioned | Legitimate interests (accuracy and defending our reports) | 2 years |
| Error reports and, if you give it, your email | To review and correct reports and reply to you | Legitimate interests | 2 years |
| Your IP address and basic request details | Security, preventing abuse and rate limits, fixing errors | Legitimate interests | Short-term server logs, as kept by our host |
| Payment details (when payments are live) | To take payment for a Deep Dive | Contract | Handled by Stripe. We don't see your card number. We keep payment records as the law requires (usually 6 years). |
| Anonymous visit statistics | To see how many people visit and which pages they use | Legitimate interests | Aggregated, with no cookies |
Who processes data for us
- Anthropic: the AI model that reads pages and writes reports. Submitted page text and screenshots are sent to it to produce your report.
- Vercel: hosts the site, stores the dated page copies and error reports, and provides anonymous visit statistics.
- Cloudflare Turnstile: checks that you're a person and not a bot, which may process device and browser information.
- Stripe: takes payments, once payments are live.
Some of these providers are based in the United States. Where data leaves the UK, we rely on the protections required by UK data protection law, such as the UK International Data Transfer Agreement or adequacy regulations.
Cookies and storage on your device
- vt_pass: a cookie set after the human check, so you aren't checked on every request. Lasts 2 hours. Strictly necessary for security.
- Local storage: your comparison list and recent results are kept in your own browser so the site works smoothly. They never leave your device unless you run a check.
We don't use advertising or cross-site tracking cookies.
Your rights
You can ask to see, correct or delete personal data we hold about you, object to how we use it, or ask us to restrict it. Email [Contact email, e.g. hello@yourdomain]. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Sellers and people named on sales pages
Sales pages sometimes name the people behind a course. We use those details only as they appear on the public page, to identify the course, and we don't build profiles of individuals.