Privacy policy
sitemap.digital is run by ND Media Ltd (company no. 10784524), Reading, Berkshire, United Kingdom. We are the data controller for the information described here. If you want a copy of your data, or want it deleted, email hello@sunnypatel.co.uk and we will reply within one calendar month.
What we collect
When you scan a website we store the scan itself: the pages we found, their titles, meta descriptions, headings, status codes, link structure and the AI readiness scores we calculated. A scan is tied to a URL you chose, not to you. Scans are readable by anyone who has the scan link, so treat a scan link as public.
If you unlock a bigger 50-page scan, or export a report, we ask for your email address. The unlock itself does not require us to keep it: the token your browser receives is signed and checked by recalculation, so it works whether or not we store anything.
We keep your address only if you tick the marketing consent box. If you leave it unticked you still get the unlock and we store no address at all. Where you do consent, we keep the address, the date, and the scan or surface it came from. We never ask for a name, a company or a phone number, and we do not buy or sell contact data.
We use no cookies of any kind and we run no analytics tag or advertising tracker. There was a Google Analytics tag on this site until 9 August 2026 and it has been removed. To see where visitors arrive from we record the host name of the referring site, such as news.ycombinator.com, against the scan record. We never record the full referring address, your IP address, or anything that identifies you. Cloudflare, which hosts the service, processes request logs on our behalf to keep it running and to stop abuse.
Why we can use it
For scans, our lawful basis is legitimate interest: we cannot run the tool without storing the result. For the referrer host name, our lawful basis is also legitimate interest, and it identifies a website rather than a person.
For your email address, our lawful basis is your consent, given by ticking the box at the unlock or export step. That consent is the only reason we hold the address, which is why an unticked box means we keep nothing. You can withdraw consent at any time, it costs you nothing, and every message we send carries a one-click unsubscribe link.
How long we keep it
- Scan results, every page and every finding: 90 days, then deleted automatically.
- A scan summary (your domain, the scan date, page count, average score, and similar aggregate numbers like issue and orphan/broken-link counts, never page-by-page detail): kept afterward so history, comparisons and the embeddable score badge keep working.
- Email addresses, where you consented: up to 2 years from capture, then deleted automatically. Without consent, nothing is stored to delete.
- If you unsubscribe, we delete your record and keep only your email address on a suppression list. That is the one thing we must retain, because it is how we guarantee we never contact you again.
Who we share it with
Cloudflare, as our hosting and storage provider. If we later send email, we will name the email provider here before the first message goes out. We do not share your data with anyone else.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Every email we send will carry a one-click unsubscribe link, and unsubscribing also erases your record. Email hello@sunnypatel.co.uk for anything else.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
Scanning other people's websites
The tool fetches publicly available pages, the same way a search engine crawler does. It obeys the limits described in our terms. If your site was scanned and you want the result removed, email us with the scan link and we will delete it.