Legal

Privacy policy

Effective September 16, 2026. The short version: no accounts, no ads, and one analytics tool you can block.

What data does AIOScan collect?

Only what running the site needs. A scan sends us the URL you entered; we fetch that site, compute the report, and return it to your browser. Reports are cached for 24 hours so share links work, and the address of each scanned site is kept for up to 90 days so score badges can refresh. We count scans by day, grade, and the page the scan started from, and keep a list of the most recently scanned site addresses so we can see how the scanner is used. We also keep anonymous tallies of how many scans pass or fail each check, which feed our published research. None of this is linked to you: no accounts, no names, and no email unless you send one through a request form. Request forms are stored by Netlify and forwarded to us by email through Resend, and are used only to answer your request.

What about server logs and rate limiting?

Our hosting provider (Netlify) keeps standard, short-lived server logs that include IP addresses, and provides us with aggregate page-view counts computed from those logs. We hold IP addresses for up to an hour to rate-limit the scanner. Neither is used to build profiles, and we don’t sell or share this data with anyone.

Do you use cookies or tracking?

Yes, one tool. We use Microsoft Clarityto see how people use the site, through heatmaps, anonymized session replays, and events such as a completed scan or a copied share link. Clarity sets first-party cookies and Microsoft processes that data under itsprivacy statement. Clarity does not run on the embeddable scanner, so visitors to sites that embed it are not tracked. To keep bots from abusing the free scanner and request forms, we may useCloudflare Turnstile, which checks that a visitor is a person, usually without asking you to do anything. We also use Simple Analytics for cookie-free page-view counts. There are no advertising scripts. Blocking cookies or using a content blocker stops Clarity without breaking anything on AIOScan.

What happens to the sites I scan?

We fetch the site’s public pages, robots.txt, sitemap, and llms.txt once per scan, identify ourselves with an AIOScanBot user-agent, and keep only the computed report and a short text extract for 24 hours. We don’t archive scanned pages.

How can you contact us about privacy?

Email hello@aioscan.com and we’ll respond promptly. If this policy changes, the effective date above will change with it.