Privacy Policy
Last updated: 2026-08-18.
This site runs no third-party advertising or analytics trackers, sets no marketing cookies on an anonymous visit, and honors the Global Privacy Control signal. We do not sell or share your personal information. This policy describes what we do collect to run the product, and who processes it for us.
What we collect
Depending on how you use Auramite:
- Free scan / emailed report: the website URL you enter, and — if you ask us to email the results — your email address.
- Consultation requests: the email address and site you submit through our contact form.
- Accounts & subscriptions: your email address, a securely hashed password (we never store the password itself), your organization name, and — through our payment processor — your billing details.
- Monitoring: the pages you ask us to watch, the report-recipient email addresses you add, and the results of each scan, which we retain for roughly a year.
- Automatically: your IP address (used briefly to rate-limit abuse) and ordinary server logs.
How we use it
To run the scans you request, send the reports and monitoring updates you sign up for, operate your account and subscription, prevent abuse, and respond to you. We do not sell, share, or rent your information, and we do not use advertising trackers.
Who processes it for us (subprocessors)
We use a small set of established service providers to run Auramite. They process your data only to provide their service to us:
- Stripe — payments and billing. Your card details go to Stripe directly and never touch our servers.
- Resend — sending transactional and report emails.
- Railway — application hosting and our database.
- Cloudflare — network delivery and security in front of the site.
Scanning third-party sites
Our scanner loads publicly available web pages the same way any browser does, records which requests fire and which cookies are set, and produces a report. We do not log into, alter, or access the private systems of any scanned site.
Your choices & rights
Email [email protected] to access, correct, or delete the information we hold about you, or to stop receiving emails, and we will act on your request. Report recipients can also ask us directly to stop sending them monitoring reports. We honor opt-out preference signals, including GPC.
Depending on where you live, state privacy laws may give you additional rights; the request address above is how to exercise them with us.
Data retention
Scan results are retained for roughly a year and then pruned (the most recent scan of each monitored page is kept so your history has a baseline). Account and billing records are kept for as long as you have an account and as required for tax and legal purposes; email us to delete an account.
Changes to this policy
Material changes are posted here, and the “last updated” date above reflects the current version.