Privacy
Privacy policy
In plain words: what Mend My Sites stores, why, who else touches it, and how you delete it.
What we store about you
Your account: name, email address and a hashed password (we never see the password itself), plus two-factor settings if you switch them on.
Your workspace: the sites you audit, the reports we produce, your branding, proposals, and the teammates or read-only clients you invite.
Support messages and any screenshots you attach to them.
What we store about the sites you audit
An audit reads only what a site publishes to everyone: its pages, robots.txt, sitemap, DNS records, domain registration dates and SSL certificate. We store the resulting report in your workspace.
To measure speed we send the site’s address to Google’s PageSpeed Insights service.
Data you collect through Mend My Sites
If you use the lead widget, visitors to your site give their name, email address, phone number and website. If you email progress reports, you give us your client’s email address. We hold this for you and use it only to run those features; you decide what happens with it and can delete it at any time.
Visits and sign-ins
When you visit our website we log each page you view: your IP address, your browser and device type, the page, the site you came from, and an approximate location (city level) worked out from the IP address. Signed in, we also log when your session starts and ends and how many pages you view.
We use this only to understand how the website and the app are used and to keep them secure. We set no tracking cookie for it, the location lookup happens on our own server (nothing is sent to a third party), and these entries are deleted after 90 days.
When you create an account we keep with it the approximate location (city level) and type of device you signed up from, and how you found us: the site or campaign that sent you and the first page you saw (remembered in the session cookie you already have, not an extra one). We keep no IP address with it, and it is deleted with your account.
Free tools
The free checkers work without an account. To stop abuse we log each check with the domain checked, the country it came from and a shortened, hashed form of the visitor’s IP address. These log entries are deleted after 30 days.
Cookies
We use the cookies needed to keep you signed in and to protect forms. We do not use analytics, advertising or cross-site tracking cookies.
Who else handles the data
Our hosting provider (the servers and database), our email provider (to deliver the emails the app sends), and Google (PageSpeed Insights). We share nothing with anyone else and never sell data.
Keeping and deleting
Your data stays for as long as your account exists. You can delete single audits, sites and leads in the app, and delete your account under Settings, which closes a workspace nobody else is a member of. To have everything erased from our database and backups, write to us and we will do it within 30 days.
Questions and requests
To see, correct or delete what we hold about you, or to ask anything about this page: sign in and write to us under Help & support.