Privacy Policy

Data Collection

We collect minimal data. Auditing a website through our website does not require account creation or login. Programmatic access through our API and MCP server does require an account and API key — see AI Tools & MCP Access below.

Analytics

We use GoatCounter for analytics, which is privacy-friendly and does not use cookies. GoatCounter collects only aggregate usage data without tracking individual users.

Audit Reports

When you audit a website, we temporarily store the report to deliver results. Reports are not permanently retained and are not shared with third parties.

AI Tools & MCP Access

Website Auditor is available as a Model Context Protocol (MCP) server and API, so you and the AI assistants you authorize can run audits programmatically. This works differently from our website, and this section explains how.

Account and API key: Unlike the website, API and MCP access requires a free Website Auditor account and a personal API key. We identify each request by that key so we can apply your plan, enforce quotas, and secure your account.

What we receive: When an AI client calls our MCP tools, we receive only the tool inputs — the website domain you want to audit, and for some tools items such as competitor domains. We do not receive your conversation history, prompts, or any other context from the AI application.

What we store: To operate the service we keep records tied to your API key, including the domains you audit, the resulting scores and reports, request timestamps, and basic usage telemetry (which MCP client and tool were used, whether the call succeeded, and how long it took). We use this to run and secure the service, enforce rate limits, apply your subscription, and improve the product. We do not log your IP address for API or MCP requests.

Retention: We keep this data for as long as your account is active. You can revoke an API key at any time from your account to stop further use of it, and you can request deletion of your data by contacting us at support@website-auditor.io. We never sell this data or share it with third parties.

Third-party AI clients: The AI assistant or host application that connects to our MCP server is operated by a third party (for example, the AI platform you use). Anything you share within that assistant is governed by that provider's privacy policy, not ours.

Data Sharing

We do not sell your data. We do not share audit results with third parties. We do not use tracking cookies.

Security

All communications with Website Auditor use HTTPS encryption. We take reasonable measures to protect the integrity of our service.