Privacy Policy

This policy describes how Site Tester (“Site Tester,” “we,” “us”) handles information when you use sitetester.app and related pages (the “Service”). It is meant to be accurate about what the Service actually does, and to limit our obligations to what the law requires. If you do not agree, do not use the Service.

The Service is private. Only the authorized account (offgriddev@gmail.com) can sign in and run audits. Visitors who are not that account can open the public pages, including these policies. Contact for privacy requests: offgriddev@gmail.com.

Depending on how you use the Service, information can include:

Account and sign-in. If you sign in with Google, we receive the identifiers Google provides for that sign-in, typically your email address, name, and profile image, plus a session that lets the Service recognize you. We do not receive your Google password. Sign-in is rejected for any email other than the authorized account, and we do not offer public registration.

Audit requests. When an audit runs, the Service receives the URL you typed. Our server fetches publicly available pages, robots.txt, and a short sample of linked URLs, and may send the URL to Google PageSpeed Insights to request lab and field performance data. The finished report is stored in your browser (local storage) on that device. It is not written into our application database as a public report, and it is not a shareable hosted link.

The PageSpeed key. If the owner saves a Google PageSpeed Insights API key, that key is stored on the server so audits can use it. It is not sent back to the browser and it is not printed on reports. Only the last few characters may be shown to the signed-in owner so they can tell which key is saved.

Device preferences. A theme choice (light or dark) may be stored in local storage on your device.

Technical data. Our hosting provider and network vendors may log IP address, user agent, date and time, and the page requested, as part of operating and securing the Service. We do not use that material to sell advertising.

We use this information only to:

run the Service and produce an audit you asked for;

keep the authorized account signed in and keep everyone else out;

store the owner’s PageSpeed key and call Google with it;

protect the Service against abuse, breakage, and unauthorized access;

comply with law and respond to lawful requests; and

understand and fix failures, such as a host that blocks the audit.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not ask you to create a marketing profile.

We disclose information only as follows:

Google. Sign-in is processed by Google. A URL submitted for an audit may be sent to Google PageSpeed Insights. Google’s terms and privacy policy govern that processing. We do not control Google.

Infrastructure. The host that runs the Service, and vendors that provide the database used for the session and the API key, process data on our behalf so the Service can function.

Legal and safety. We may disclose information if we believe it is reasonably necessary to comply with law, protect the Service or its operator, or respond to a claim that the Service is being misused.

The sites you audit. Requesting a public URL reveals, to that site and its providers, that a server asked for the page. We do not add your account email to that request as a label, but a normal web request can include an IP address and a user agent.

We do not authorize those parties to use the information for their own marketing.

Reports and the theme preference stay in your browser until you clear them, clear site data, or use a different device. A saved PageSpeed key stays until the owner replaces or deletes it. Session records last according to the sign-in system and end when you sign out or the session expires. Host logs last for the period set by the host, which we do not promise to shorten or extend. We may delete any of this earlier if we shut down a feature or need to protect the Service.

We use reasonable measures appropriate to a small private tool, including keeping the PageSpeed key on the server and restricting sign-in to one account. No method of storage or transmission is perfectly secure. We do not guarantee that unauthorized access, bugs, or vendor failures will never happen. You are responsible for the security of the Google account used to sign in and for the browser where reports are stored.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child provided personal information, email offgriddev@gmail.com and we will delete what we can identify.

You can sign out, decline to run an audit, and clear local storage in your browser. The owner can delete the PageSpeed key from the admin page. Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or limit certain processing. To make a request, email offgriddev@gmail.com. We may need to confirm that the request comes from the authorized account. We will not discriminate against you for exercising a right the law gives you.

If a law requires a specific appeal or a complaint to a regulator, you may use that process. Nothing in this policy waives a right that the law says cannot be waived.

The Service may be hosted in a country other than yours, including the United States. Information may be processed in the places where we, Google, and our host operate. Those places may have different privacy laws than your own. By using the Service, you understand that this transfer and processing will happen.

We may update this policy by posting a new version on this page and changing the date above. Continued use after that date means you accept the update, to the extent the law allows a privacy notice to work that way. Use of the Service is also covered by the Terms of Service, including the disclaimers and limits of liability in those terms.

Privacy questions: offgriddev@gmail.com.