Privacy

What we collect

To run the service, we have to keep some data:

• Your email, if you sign up. Used only to recover your API key if you lose it. Never sold, never shared.
• Your API key. Hashed in our database. Used to authenticate your requests.
• Call logs: which API key called which endpoint, when, and the response status. Used for usage tracking, abuse detection, and the dashboard. Not used for anything else. Retained for 30 days.
• The IP address making the request, for the free-tier rate limit and the audit log. Not used for any other purpose.
• Billing data: handled by Paddle. We never see your card number. Paddle stores it.

What we don't collect

• No third-party analytics (no Google Analytics, no Mixpanel, no Segment). We don't track you across the site.
• No fingerprinting.
• No data sharing with advertisers. (We don't have any.)

What about the URLs you screenshot?

When you call /api/shot, our server fetches the URL you passed. We do not store the URL or the screenshot beyond the 5-minute edge cache that makes repeat calls fast. We do not analyze the content, we do not pass it to any third party, and we do not use it for any purpose other than giving you back the image you asked for.

If you call /api/preview, we fetch the URL, parse the HTML, and return the metadata. Same policy: no storage beyond the 5-minute cache.

If you call /api/headers, we fetch the URL, read the response headers, and return the analysis. We do not store the response body.

If you call /api/certs, we query crt.sh and cache the result for 24 hours so we don't hammer their service. The cache is keyed on the domain you queried.

Cookies

None set by us. Paddle may set a cookie during checkout. Cloudflare may set a cookie for rate-limiting (their __cf_bm); it's a security feature, not an analytics tool.

Your rights

Email privacy@sitetrace.it.com and we'll:

• Send you everything we have on your account.
• Delete your account, your key, your call logs, and any cached results within 7 days.
• Cancel any active subscription and confirm the cancellation in writing.

Changes to this policy

If we change anything material, we'll email you. Minor wording fixes will be silently updated with a "last updated" date.