Privacy note

Plain-language summary of what this tool records. Last updated September 2026.

What runs where

The checks themselves run in your browser. To read a site that blocks cross-origin requests, the homepage, robots.txt, /llms.txt, /sitemap.xml, /products.json and one product page are fetched through a server-side proxy. The proxy sends its own identifier (AgentReadinessCheckBot/1.0) to the target site — your IP address is never passed on to the sites you scan.

What is recorded

• Scan results. For each scan we store the domain you entered, the score, the band, the detected platform, and which individual checks passed or failed — plus a timestamp and the referring page. This builds an anonymous, aggregate benchmark ("how do sites compare"). It contains no information about you as a visitor.
• Email — only if you submit it. If you enter an email in "Get the fix plan by email" and tick the consent box, we store that address together with the domain and score of your most recent scan, so we can follow up. Nothing is stored if you don't submit the form.
• Abuse limits. The API endpoints briefly hold a counter keyed to your IP address (a few minutes) to rate-limit automated abuse. It is not stored with your scan or email and is not used to identify or profile you.

What is not done

• No cookies, no localStorage, no analytics or advertising scripts, no tracking pixels, no session recording.
• No selling or sharing of email addresses with third parties.
• No linking of scans to a person unless that person submits their email.

Third parties

• Vercel hosts the site and the API. Like any host it keeps short-lived request logs (timestamp, IP, path) for operations and security.
• Google Fonts serves the two web fonts, so Google receives your IP and user-agent when the page loads. No cookies are set by this.
• Upstash / Vercel KV (if configured) stores the scan and email records described above.

Retention & your choices

Per-domain scan records expire automatically after ~180 days. Aggregate counters are kept indefinitely but hold no personal data. To have an email address and its associated record removed, contact the tool owner and it will be deleted.

← Back to the tool