Privacy

The free checker

The free checker runs entirely in your browser. Your page source is parsed by JavaScript on your own computer using the browser's built-in HTML parser. Your page is never transmitted to us or to anyone else. There is no upload, no API call and no server-side processing of your content.

You can verify this: open your browser's developer tools, go to the Network tab, and run a check. No request carries your page. (Google Analytics, described below, records that the checker page was visited and used, never what you pasted into it.)

There is exactly one exception, and it is off unless you switch it on.

The benchmark

Under your results there is an unticked box offering to add your score to a benchmark. If you tick it, and only then, we receive six numbers and a word:

Sent	Not sent
Your overall score	Your website address
The four dimension percentages	Your page source
Which rubric version scored it	Anything identifying you or your business
The platform we detected, if any	Cookies, fingerprints or an account

There is no identifier attached, so we cannot connect two submissions to the same person or the same site, and neither can anyone else. It is genuinely a number in a pile of numbers.

Why we are asking. Our methodology page promises to publish what a typical score looks like — a median and a top decile, with the sample size beside them — once there are enough runs to say it honestly. That data has to come from somewhere, and the alternative is inventing it, which we are not going to do.

Your choice is remembered on your own computer. Untick it and nothing is sent again. If the box is not there at all, it means the collection endpoint is not live yet and the checker sends no scores anywhere.

Your report

Your report is emailed to you as a document. It is not published on this website, and we do not tell anyone your score.

We keep a copy, and the notes behind it, for two years so we can answer questions about it and run the Roadmap re-test. Ask us through our contact form and we will delete them, always within seven days. You do not need to give a reason, and it does not affect your right to a refund.

The order form

The order form asks for your website address, any other websites, how many main services or products you have, your first name, email and country, and an optional discount code. When you press the button, those details are sent to our inbox through Formspree, the form service we use. Nothing is stored on this website itself.

We use them to confirm your order, send you a payment link and tax invoice, and produce your report. We do not add you to a marketing list, and we do not sell or share your details.

What we collect

• Visit statistics, through Google Analytics: which pages are viewed, how visitors arrived (including from AI assistants such as ChatGPT or Copilot), device type and approximate location. Full statistics only if you accept cookies; otherwise only cookieless signals. We use it to see which pages are useful and where visitors come from, never for advertising. Google Analytics 4 does not store IP addresses.
• Nothing that identifies you by name, unless you send us a form.
• What you type into a form, if you order or ask a question. We keep it to reply to you and to deliver what you bought.

Cookies

Nothing is set until you choose. When you first visit, a small banner asks whether we may use Google Analytics cookies. Until you press Accept, Google Analytics runs in its privacy mode: it sets no cookies and sends only basic, cookieless signals that cannot be tied to you across visits.

If you accept, Google Analytics sets first-party cookies (named _ga and _ga_ followed by an ID) so it can tell a new visit from a returning one. We never use advertising cookies, and advertising features stay switched off whatever you choose.

Your choice is remembered in your own browser. You can change it at any time with Cookie settings, also linked in the footer of every page; declining removes the Analytics cookies. You can also block cookies in your browser, or install Google’s opt-out add-on.

Third parties

The site is hosted by SiteGround, whose servers keep standard access logs (IP address, page requested, time) for security. Visit statistics are processed by Google Analytics (Google LLC), order and question forms by Formspree, and payments by Square, each under their own privacy policies. The site loads fonts from Google Fonts, which means Google receives your IP address when a page loads. If that matters to you, a self-hosted font build is on our list.

Paid packages

If you order a package, the details you enter are sent to our inbox through Formspree, the form service we use, which processes them on our behalf. We then fetch and review the website you gave us. Payment is handled by Square on its own hosted page — card details never touch our systems and we never see them.

Changes

Material changes get an entry in the changelog.

Contact

The entity responsible for any data collected here is Virtual Planet Pty Ltd (ABN 79 694 149 589), Sydney NSW, Australia. Questions through our contact form.

This is not legal advice and we are not lawyers; if you need a privacy policy for your own site, get one written properly.