Privacy policy

What SagBot stores, why, who else processes it, and how to change your mind.

Who is responsible

SagBot (sagbot.app) is the controller of the data described here. For questions or requests, write to bot@sagbot.app.

What we store and why

  • Scans The domain you enter, the site type you pick and the scan result. Anyone with a report’s link can open it, so share links keep working.
  • Score tracking waitlist Your email address and the site, only if you send the form. We use them only to tell you when tracking launches.
  • Abuse protection Cloudflare Turnstile checks that a person starts each scan, and your IP address limits how many scans one visitor can run. Your IP address isn’t saved with your scan.
  • Hosting SagBot runs on Cloudflare, which processes request data such as your IP address and browser to deliver and protect the site.
  • Analytics, only with your consent Google Analytics 4, loaded through Cloudflare Zaraz, counts visits and which features are used, for example scans started or fixes copied. IP addresses are anonymized, events never include your email or what you type, and nothing is sent until you accept.
  • Visit counts Cloudflare Web Analytics counts page views without cookies or personal identifiers.

Cookies and browser storage

  • The sagbot_lang cookie keeps the language you pick, for one year.
  • Your light or dark theme stays in your browser’s local storage.
  • Cloudflare Zaraz keeps your consent choice and the page language in your browser.
  • Google Analytics cookies are set only after you accept analytics.

Legal bases

  • Analytics and the waitlist Your consent, which you can withdraw at any time.
  • Scans, abuse protection and hosting Our legitimate interest in running a free and safe service.

Who else processes it

Cloudflare (hosting, Turnstile, Zaraz and Web Analytics) and, only with your consent, Google (Analytics). They may process data outside your country, including in the United States, under their data processing terms.

How long we keep it

Reports: kept so their share links keep working, until you ask us to delete one. Waitlist entries: until tracking launches or you ask us to delete them. Google Analytics data: 14 months. Cloudflare request logs: as long as Cloudflare keeps them.

Your rights

You can ask to see, correct or delete your data, object to how it’s used, or withdraw consent. Write to bot@sagbot.app. You can also complain to your data protection authority.

Open Cookie settings at the bottom of any page to accept or refuse analytics again.

Changes

When this policy changes, we update this page and the date at the top.