Privacy Policy
Short version: when you scan a site, we store the URL you scanned, the score we gave it, and — if you request the full report — the email you gave us to send it to. We don't sell any of it.
What we collect
- The URL you scan: sent to Claude (Anthropic) for analysis, and kept as a record so we can send you the full report and count total scans performed.
- Your email (only if you request the full report): stored alongside the URL, score, grade, your IP address, and a one-time report token, so we can email you the quick-wins report and, for security, trace abuse of the free tool.
- Analytics: Google Analytics (GA4) — standard pageview and event tracking, no cross-site ad targeting.
- Session analytics (outside the EEA, UK and Switzerland only): Microsoft Clarity — anonymised heatmaps and session replay, which records page views, clicks, scrolling and mouse movement on this site. It is not loaded at all for visitors in the EEA, the UK or Switzerland, because we run no consent banner and will not record a session there without one. No ad targeting either way.
How we use it
To run the CRO analysis (we send the URL you submit to Claude, Anthropic's AI, for scoring), generate your report, email it to you if requested, and understand which parts of the tool get used. We do not use your data for advertising, and we don't share your email with anyone outside the report-sending itself.
Scanning a URL
When you submit a URL, our server fetches and analyzes its public page content to generate a CRO score — the same way any browser would load the page. We don't scan pages behind a login, and we don't store the scanned page's content itself, only the resulting score and category breakdown.
Who sees your data
Anthropic processes the URL you submit to generate the analysis. Google Analytics processes anonymized usage data. Microsoft Clarity processes anonymised session-interaction data, and only for visitors outside the EEA, the UK and Switzerland. None of them can use your email or scan history for their own purposes.
Cookies
We use standard Google Analytics cookies for aggregate usage stats. Visitors outside the EEA, the UK and Switzerland also receive Microsoft Clarity's own first-party cookies (_clck, _clsk) for the same purpose; visitors inside those regions receive neither, because Clarity is never loaded for them. No third-party ad-tracking cookies, no cross-site retargeting.
Your rights
You can ask us to see, correct, or delete the email and scan history we hold about you at any time. Email hello@crograder.com and we'll act within 30 days.
Changes
If this policy changes materially, we'll update the date above.
Contact
Questions about this policy: hello@crograder.com. See also our contact page.