Privacy Policy

What we process

When you submit a URL, we process that address and fetch publicly available web content from it (for example HTML) so we can extract text and run an automated analysis. We only intend to access content that is available without signing in or bypassing access controls. Do not submit URLs or content you are not authorised to share.

If you purchase or manage a paid subscription, our payment partner processes payment details; we receive limited billing and subscription identifiers needed to provide access.

Screenshots and Pro visual analysis

Paid (Pro) plans may include a full-page screenshot of the public page and a visual critique. To create that image, we use third-party capture services (for example ScreenshotOne or Microlink). A copy of the image may be stored on our file hosting (for example Vercel Blob) so we can show a durable link in your results. Those URLs are intended for delivering the feature, not for building a marketing archive of third-party sites.

Screenshot and vision steps may send image data to our AI provider solely to generate analysis. We do not claim ownership of third-party websites or their content.

Third-party sites and copyright

Text and images from URLs you submit may be owned by others. You should only submit addresses you are allowed to analyse. If you are a rights holder and believe material should no longer be processed or linked by us, see Removal requests on our contact page.

Storage and retention

We do not use your submitted page content to build a marketing profile, and we do not keep a permanent archive of extracted page text for that purpose. Analysis runs when you request it; content is processed to produce your results. Cached analysis results may be held for a limited period so the product can respond quickly when you return to a recent run.

We may store a small billing session record (for example subscription status linked to your browser session) so paid features work reliably. Operational logs on our hosting infrastructure may be generated when you use the service (for example for security and debugging).

We record usage metrics that include hostnames from submitted and resolved URLs, combined with an anonymous technical identifier and calendar day, to operate fair-use limits and understand aggregate demand. We do not use this to sell personal profiles or to identify you for marketing.

Logs and telemetry

Our hosting environment may log technical events (for example errors, latency, or security signals). We also emit structured operational events (for example analysis duration, plan type, and high-level token usage) to run the service and improve reliability. We design these logs to minimise personal data and we do not use them to track you across unrelated websites.

Cookies and similar technologies

We do not use marketing or advertising tracking cookies. Where needed for the service to function (for example session or billing-related cookies), we use them only for that purpose.

Third parties

We rely on service providers to run Roast My Page, including: website and file hosting (for example Vercel and Vercel Blob); AI features (for example OpenAI) to generate analysis from text and, on Pro, from images; capture services (for example ScreenshotOne or Microlink) for screenshots; and payment processing (Lemon Squeezy) when you pay for paid features. Each provider processes data under their own terms and privacy notices.

Where personal data is transferred outside the UK or EEA, appropriate safeguards may apply under applicable law.

UK, EEA, and Türkiye users

If you are in the UK, the European Economic Area, or Türkiye, applicable data protection law may give you rights to access, rectify, erase, or restrict processing of personal data, to object to certain processing, and (where the law provides) to lodge a complaint with a supervisory authority. International transfers may rely on mechanisms such as adequacy decisions or standard contractual clauses, depending on the provider and your location.

Turkish law (KVKK) may also grant you specific rights regarding personal data processed in Türkiye; you may contact us using the details below to exercise rights or ask questions.

Your rights and removal requests

To exercise privacy rights, report abuse, or request removal of hosted material, use Contact. We aim to respond within a reasonable time. We may refuse requests that are manifestly unfounded, excessive, or repetitive, or where we cannot verify the request.

Changes

We may update this policy from time to time. Continued use of the service after changes means you accept the revised policy.