Privacy

What X-Ray collects, why, and for how long.

What we collect

• The domain you audit and the report we generate about it. Reports are kept for 90 days, then deleted.
• The email address you give us, used to send you that report and kept alongside it for the same 90 days. We do not sell or share lists.
• Your IP address, used only to rate-limit the free service. It is kept with the report record and deleted on the same schedule.

Analytics

We use Google Analytics through Google Tag Manager to understand how the site is used. Consent Mode is set to denied by default, so no analytics cookies are written unless you accept them on the banner. Until you do, Google receives only cookieless, aggregated pings. We never grant advertising storage or personalisation, whatever you choose, because there are no advertising tags on this site.

Your answer is remembered in a cookie named xr_consent, set on this domain for six months. It stores nothing but the word granted or denied. That one is strictly necessary — without it we could not honour your choice — so it is set either way. Change your mind at any time with Cookie settings in the footer.

Who processes it

• Cloudflare hosts the service and stores reports.
• Resend delivers the report email.
• Google provides analytics as described above.

Crawling

When you audit a site, we fetch only that page and the files it publishes about itself, identifying ourselves as XRayBot. We never touch anything behind a login.

Contact

Super Web Guys runs X-Ray. Questions and deletion requests: audit@superwebguys.com.