# Privacy Policy Privacy policy for Crawl Readiness website and Chrome extension. Last updated: September 20, 2026 Crawl Readiness is operated by Tundrastone, an Ontario, Canada business. Our handling of personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). ## What we collect When you sign up for a free account at crawlreadiness.com, we collect your email address and a hashed password (managed by Supabase). If you sign in with GitHub instead, we receive your email address and GitHub account identifier from GitHub, and no password. We store an API key (as a one-way hash) that you use to call our checker service, and a log of the URLs you check along with their scores. If you use the LLM Monitor, we store what you enter — brand name, website, competitor names and the prompts you want tracked — together with the answers the AI systems return. If you set up drift alerts, we store the Slack or Discord webhook address you give us. Like any website, our hosting provider records technical data such as IP address and browser type in server logs, and we use IP addresses to enforce fair-use rate limits. We use Vercel Web Analytics, which is cookieless, to count page views. We do not use advertising cookies or cross-site trackers. ## Public audit data When you or anyone else runs a check on a website, we cache the results (URL, score, and public signals like robots.txt and meta tags) so they can be viewed at a shareable report URL and optionally listed on our public leaderboard. We only inspect publicly accessible signals — the same information any web browser or search engine crawler can already see. We do not attempt to bypass authentication or access private pages. This applies whether or not you are signed in: checks run from your account, the Chrome extension, the API or the MCP server also produce a report at an unlisted URL, and the checked domain can appear on the leaderboard. Reports show the website that was checked, never who checked it. Report pages are marked `noindex` so search engines do not list them. **Removal:** If you own a domain that appears in a public report or on our leaderboard, email us at [support@crawlreadiness.com](mailto:support@crawlreadiness.com) with the report URL and we will remove or de-index it within 5 business days. ## Chrome Extension The Crawl Readiness Chrome extension stores your API key in Chrome's sync storage. When you click "Check This Site," the extension sends the URL of the currently active tab and your API key to our /api/check endpoint. The extension does not track your browsing, does not run in the background, and does not send any data unless you explicitly click the check button. ## How we use it We use your email to identify your account and send transactional messages (password resets, subscription receipts). We use check history to enforce monthly usage limits and to show you your recent activity in the dashboard. We do not sell or share your data with third parties for advertising or marketing. ## Service providers We rely on a small number of providers to run the service. They process data on our behalf, and some of them do so outside Canada, including in the United States. - **Supabase** — database and account authentication. - **Vercel** — website hosting, server logs and cookieless analytics. - **Stripe** — payments (see below). - **OpenAI, Anthropic, Perplexity and SerpAPI (Google results)** — the LLM Monitor sends your prompts to these services to collect their answers. Anthropic also receives the brand and competitor names you enter, the returned answers (to classify sentiment), and public text from the website you ask us to analyze (to suggest prompts). We do not send them your email address or account details. - **GitHub** — only if you choose to sign in with GitHub. - **Slack or Discord** — only if you add an alert webhook; alert messages contain your brand name and its change in mention rate. ## Payments Payments are processed by Stripe. We never see or store your credit card details. We store a Stripe customer ID linking your account to your subscription for billing purposes. ## Data retention You can delete your account at any time by emailing us at support@crawlreadiness.com. On deletion, we permanently remove your account, API keys, and check history within 30 days. ## Contact Questions about this privacy policy? Email [support@crawlreadiness.com](mailto:support@crawlreadiness.com). --- Source: https://www.crawlreadiness.com/privacy