Privacy policy
sitemap.digital is run by ND Media Ltd (company no. 10784524), 17 Gainsborough Road, Reading, RG30 3DB, United Kingdom. We are the data controller for the information described here. If you want a copy of your data, or want it deleted, email hello@sunnypatel.co.uk and we will reply within one calendar month.
What we collect
When you scan a website we store the scan itself: the pages we found, their titles, meta descriptions, headings, status codes, link structure and the AI readiness scores we calculated. A scan is tied to a URL you chose, not to you. Scans are readable by anyone who has the scan link, so treat a scan link as public.
If you unlock a bigger 50-page scan, or export a report, we ask for your email address. The unlock itself does not require us to keep it: the token your browser receives is signed and checked by recalculation, so it works whether or not we store anything.
We keep your address only if you tick the marketing consent box. If you leave it unticked you still get the unlock and we store no address at all. Where you do consent, we keep the address, the date, and the scan or surface it came from. Our free unlock forms do not ask for a name, a company or a phone number. Paid checkout is separate, as explained below. We do not buy or sell contact data.
Our application sets no cookies and runs no third-party analytics tag or advertising tracker. An external payment checkout has its own privacy and cookie practices. There was a Google Analytics tag on this site until 9 August 2026 and it has been removed. We record a small set of first-party product events, such as a scan result being viewed, a report being downloaded or weekly monitoring being requested. An event contains its allowlisted event type, an optional scan ID and a few bounded details such as the surface or item count. It never contains an email address, IP address, full URL, error message or persistent visitor identifier. To see where visitors arrive from we separately record the host name of the referring site, such as news.ycombinator.com, against the scan record, never the full referring address. Short-lived rate-limit records use network addresses or derived identifiers to prevent abuse. Cloudflare, which hosts the service, processes request logs on our behalf to keep it running and to stop abuse.
Private Search Console imports
If you import a Search Console Pages CSV, its page URLs, clicks, impressions, CTR, average position, filename and the dates you enter are processed in your browser. They are not uploaded to our scan API, added to public scan links or sent to an AI provider. Your selected business-priority pages are also private browser data.
These imports and selections are saved in local storage on this browser, per scan, until you remove them in the report or clear this site's browser data. Anyone using the same browser profile may be able to see them. If local storage is blocked or full, the interface tells you when it cannot save your changes. No copy is synchronised to another device.
Private data is excluded from the printable report and action-plan download by default. You can explicitly include it when exporting. If you do, sharing that downloaded or printed file will also share your private figures; sharing the public scan URL will not.
Why we can use it
For scans, our lawful basis is legitimate interest: we cannot run the tool without storing the result. For the referrer host name and limited first-party product events, our lawful basis is also legitimate interest: they show whether the service works and which features are useful without creating a cross-site or persistent visitor profile.
For marketing email addresses, our lawful basis is your consent, given by ticking the box at the unlock or export step. That consent is the only reason we hold the address, which is why an unticked box means we keep nothing. You can withdraw consent at any time, it costs you nothing, and every message we send carries a one-click unsubscribe link.
Optional paid reports and Stripe
When paid checkout is enabled, ND Media Ltd (company no. 10784524), 17 Gainsborough Road, Reading, RG30 3DB, United Kingdom, is the seller of the report. Stripe processes the card payment on our behalf and its hosted checkout collects payment, billing and receipt information under its privacy policy. We do not collect or store card details; Stripe receives them and we never see them. Payment notifications can include billing information; our application verifies the notification and stores only the purchase and payment references, scan ID, payment or refund status, dates and a hash of the report-access secret. It does not save checkout names, email addresses, addresses or the full notification body.
We send Stripe an opaque purchase reference for the checkout. When Stripe redirects you back after payment, the return address carries a private report link in its fragment; our application removes it from the visible address as soon as it is read, and we do not email it to you. We do not send your crawl contents, imported Search Console data or business-priority selections to Stripe. We process the purchase record to fulfil your order and handle support; it is not marketing consent.
This browser saves the purchase reference and access secret in local storage so you can reopen the report. Clearing this site's browser data removes that local copy. The report page offers "Copy private access link", which reconstructs this same private link from the access secret already held in this browser, so you can keep a working backup or open the report on another device; use it before clearing this browser's data. Anyone holding that link, or using this browser profile, may access the report. Your free scan link does not grant paid access.
How long we keep it
- Scan results, every page and every finding: 90 days, then deleted automatically.
- First-party product events: 90 days, then deleted automatically.
- A scan summary (your domain, the scan date, page count, average score, and similar aggregate numbers like issue and orphan/broken-link counts, never page-by-page detail): kept afterward so history, comparisons and the embeddable score badge keep working.
- Email addresses, where you consented: up to 2 years from capture, then deleted automatically. Without consent, nothing is stored to delete.
- Paid report snapshots: available for 30 days after payment, then expired and automatically removed from our report storage. An unpaid checkout snapshot expires after 31 days. Downloaded copies remain on the device where you save them.
- Minimal purchase and refund records: up to 180 days, with daily cleanup, for fulfilment, support and payment verification. Stripe keeps its own transaction records under its retention policy. Browser-saved access details remain until you clear this site's data.
- If you unsubscribe, we delete your record and keep only your email address on a suppression list. That is the one thing we must retain, because it is how we guarantee we never contact you again.
Weekly monitoring emails
If you ask us to watch a domain, we re-scan it roughly every 7 days and email you what changed, using the address you gave and only for the domain you asked about. That is the consent record we hold for the send, and it is separate from the marketing box above. Every monitoring email carries a one-click unsubscribe link. Clicking it stops the emails and deletes the watch, so no further checks run for that domain.
Share your experience pilot
We run a small invitation-only pilot in which someone who shares an honest public post about using the tool receives one larger crawl in return. It is off by default and takes no part in ordinary scanning. If you take part, we hold a pseudonymous record: a seat number, the link to your public post and the platform it is on, the status of your reward, the reviewer's note, and the identifier of the scan it paid for. The pilot has no name or email field, and we never ask you for either.
A link to a public post usually identifies a social media account, so we treat it as personal data. We do not ask for a name or an email address as separate fields, but that is not the same as holding none: a public post normally identifies a social media account, and an operator's written review note is free text that can contain a name, an email address or other personal details. We treat all of it as personal data and clear it together.
Your access is an unguessable key generated in your browser. Your browser does send that key to us: once when you use your invitation, and in an authorisation header on later requests, so we can tell which place is yours. We store only a one-way hash of it and never write the key itself down, so we cannot recover or resend it if you lose it. We do not fetch, scrape or monitor your post: a person reads the link by hand once, at review.
When a place in the pilot is finished with, we clear the post link, the post identifier, the platform, the review note, the domain your reward was spent on, and the key hash. What is kept afterwards is a small accounting record: the pilot round, the seat number, the status, whether the reward was used, the hash of the used invitation code, the identifier of the scan it paid for, and the dates. We keep that so a place cannot be quietly reused.
A place becomes eligible for that clear-down 90 days after its last activity, and a rejected submission additionally has to be at least 30 days old so you keep time to correct and resubmit. Both conditions must be met. The clear-down is run by hand rather than on a timer, so it happens shortly after a place becomes eligible, not at a guaranteed moment. Places that are still open, still hold an unused reward, or are waiting for us to settle a reward, are not cleared at all until a person resolves them, so they can stay well beyond 90 days.
You can ask us to close and clear your place sooner by emailing hello@sunnypatel.co.uk. That requires a person to act, and an unresolved reward has to be settled first; we will keep the small accounting record described above in either case.
Your access key is kept in this browser's local storage only, because it is the only way to reach your reward. There is a control on the pilot page to remove it. We do not use cookies for any of this.
Who we share it with
Cloudflare, as our hosting and storage provider; EmailIt, which delivers the monitoring emails described above on our behalf; and Stripe, which handles the optional paid checkout and receipts described above. No imported private Search Console data is sent to any payment or email provider.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Every email we send will carry a one-click unsubscribe link, and unsubscribing also erases your record. Email hello@sunnypatel.co.uk for anything else.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
Scanning other people's websites
The tool fetches publicly available pages, the same way a search engine crawler does. It obeys the limits described in our terms. If your site was scanned and you want the result removed, email us with the scan link and we will delete it.
Browser extension
The sitemap.digital Chrome extension sends only the origin of the tab you are viewing, and only when you click "Map this site" or "Scan in background", never in the background and never your browsing history. Scan ids it starts are stored locally in your own browser (chrome.storage.local), not synced anywhere by the extension. Uninstalling the extension removes everything it stored.
The sitemap.digital MCP server sends requests to this same public API from your own machine or network, under your own network access, and any scan it starts creates the same public, unguessable permalink as a scan started from the website.