Privacy
getReport is built to know as little about you as possible. There is no account, no advertising, no third-party tracker and no cookie. This page says exactly what is stored, for how long, and which companies touch it.
Last updated 24 September 2026
What we store
Reports. The URL you entered, the final URL, the response headers, the page’s HTML-derived findings, a screenshot, and the speed measurements. Reports are public to anyone who has the link, carry a noindex tag so search engines do not list them, and are kept for 12 months. Raw Lighthouse data is kept 30 days.
Your connection. To enforce fair-use limits we keep a salted hash of your IP address for 24 hours. The raw address is not stored with a report.
Feedback. A thumbs up or down on a finding stores the vote and the check id, nothing that identifies you.
Email. Only if you later set up monitoring or verify a domain. The address is encrypted at rest and hashed for lookup, and every mail carries a one-click unsubscribe and delete link. Monitoring is not live yet.
Donations. The amount, the date, the platform and, if you chose to be listed, the name you gave. We never see or store card details. A salted hash lets us count you once on the supporters wall.
What we do not do
- No cookies. Your browser keeps two preferences (dismissed banner, feedback given) in its own storage, which never leaves your device.
- No third-party analytics or advertising scripts. Traffic statistics come from a self-hosted Plausible instance that stores no personal data and needs no consent.
- No selling, sharing or profiling. Sponsors get a logo placement, not data.
- No fetching of anything except the public page you asked us to check and the standard files around it (robots.txt, sitemap, favicon, security.txt).
Who processes data
| Company | Where | What for |
|---|---|---|
| OVH SAS (OVHcloud) | France (EU), servers in Germany | Servers that run the site, the checks and the database |
| Cloudflare, Inc. | EU data centres, US company | DNS, CDN, DDoS protection, Turnstile bot check, R2 file storage for screenshots, PDFs and raw Lighthouse data |
| Google LLC | US | PageSpeed Insights and Chrome UX Report APIs: we send the URL you check, nothing about you |
| Ko-fi, GitHub (Microsoft), Stripe | UK / US / US | Payments, only if you donate; we receive the amount and, if you opt in, your public name — never your card |
| Amazon Web Services (SES) | Frankfurt (EU) | Email delivery for monitoring alerts and magic links, once monitoring launches |
Your rights
Under the GDPR you can ask what we hold about you, have it corrected or deleted. For reports: if you own the checked site, verify the domain (DNS record, meta tag or a file) and delete its reports from the domain page; until that feature ships, write to us with proof of ownership. For emails: every mail has a delete link. For anything else: [email protected]. We answer within 30 days, usually within a few.
The controller is the operator of getreport.app, reachable at the same address. You can also complain to your national data protection authority; in Croatia that is AZOP.
Changes
This page changes when the service does; the date at the top and the changelog record it.