Privacy policy
Last updated: October 2026
IndexReady ("we") runs indexready.dev, a tool that checks whether websites can be read by search engines and AI crawlers. This policy explains what we collect and why. Questions: support@indexready.dev.
What we collect
- Websites you check. We fetch the public pages of the URL you enter, the same way a search engine crawler does. We cache the result for one hour and keep an anonymous record of the domain, score and which checks failed, to publish aggregate statistics. We do not store page content, and leaked keys are only ever shown masked and never stored in full.
- Your email address, if you sign in, so we can send sign-in links, weekly monitoring alerts and service messages.
- Sites you add to monitoring and their check results, linked to your account.
- Subscription status (plan, renewal date, status) received from our payment provider. We never see or store your card details.
- Technical data: IP addresses are used briefly for rate limiting and abuse prevention, and appear in our hosting provider's logs.
Cookies
We set one cookie, ir_session, to keep you signed in. We don't use advertising or tracking cookies. The human check on the free scan (Cloudflare Turnstile) may set cookies needed for bot detection.
Who processes data for us
- Cloudflare: hosting, database, bot protection
- Resend: sending email
- Waffo: payments, as merchant of record (their privacy policy applies to checkout)
- Google Fonts: serving the fonts on this site
How long we keep it
Account data is kept while your account exists. Monitoring results keep the last 20 checks per site. Anonymous scan statistics are kept indefinitely. Delete your account by emailing us and we'll remove your data within 30 days, except records we must keep for tax and accounting.
Your rights
You can ask to access, correct, export or delete your personal data at any time by emailing support@indexready.dev.
Changes
If we change this policy in a way that matters, we'll update the date above and email signed-in users.