Last updated 24 September 2026
This page is short because there is very little to tell. We would rather say plainly what happens than bury it.
When you type a web address into the checker, we look up that address and fetch the home page — exactly what any visitor to that site does. We read the page for a handful of technical details: whether it loads, whether it is secure, whether it is built for phones, whether it has a title and description, whether the phone number is tappable, and whether it publishes machine-readable business details.
We do not store the address you enter, and we do not store the result. The check runs, the answer is sent back to your browser, and nothing is written down. Reload the page and it is gone. We do not ask for your email and there is nothing to unsubscribe from.
We do keep a short-lived count of how many checks have come from an internet address in the last minute, so that the tool cannot be used to hammer other people's websites. That count is held in memory, is not linked to you, and disappears on its own.
When you add photographs on the intake page, they are resized and placed into your website inside your own browser. They are not uploaded, not sent to our servers, and not stored anywhere by us. If you download the site, the photos are in that file on your computer. Close the tab without downloading and they are simply gone.
This is deliberate. The simplest way to keep a promise not to hold someone's photographs is never to receive them in the first place.
The details you type on the intake page — name, address, phone, links, what you sell, your hours — are sent to our server so the review can be built, used to build it, and then discarded. They are not written to a database, because there isn't one. Nothing is kept after the response is sent back to you.
Then we have your email and whatever you put in it, for as long as that message sits in the inbox. We use it to reply to you. We do not add you to a mailing list, and we do not pass it to anyone else.
There is none. No analytics, no advertising pixels, no third-party scripts, and no cookies set by this site. Our host, Vercel, keeps standard server logs in order to run the service.
That is different, and it is not covered here. Once you send us photographs, menus, account access or anything else about your business, we will hold material that belongs to you — and you will get terms in writing that say what we hold, what we may do with it, how long we keep it, and how to get it back or have it deleted. We are not collecting any of that today.
It looks at public information only — what Google, your website and your social pages already show anyone — and changes nothing. The result is kept for 24 hours under a link you can share, then deleted, unless you attach it to an account with your email. A hashed form of your connection address is kept for that day to stop the check being run in a loop; it cannot be turned back into the address.
Everything above holds for the free tools: nothing is stored. An account is different, and this section is the terms of it, written before the first account existed.
What we keep. Your email address (to sign you in — there is no password); your business name; the details, pictures and website look you enter in the builder; the checks you run; your published website and every version of it; a record of your agreement to the terms (version, time, and a hashed connection address) when you pay; and, for a site we host, page views by page and day. Why. So they follow you across devices and we can show you what changed. We never sell or share any of it, and we never use it to build a profile of anyone.
How long. While your account exists, plus 90 days after your subscription ends or your last sign-in, whichever is later — then it is deleted. Deleting it yourself. There is a “delete my account” button in your account, and it works at once: every row that is yours, gone. By email, within 7 days of asking.
Who handles it. Stripe (billing — your card details go to Stripe, never to us); Supabase (the database, sign-in links and photo storage); Google (the Places and Search APIs behind the “where you stand” check — we send them your business name and town, nothing about you); Anthropic (the model that drafts the written assessment and, in the builder, text from your own details — it is sent the business facts, never your email or card); and Vercel (hosting). Each is a processor working for us; none may use your data for anything else.
Web traffic, if you opt in. The script we give you for your own site records the page, the day, and which site sent the visitor. It sets no cookies, stores no IP addresses, and does not identify anyone. It is off unless you turn it on, and removing the one line of script turns it off.
Sign-in links. A link is valid for 15 minutes, works once, and is sent only to the address on the account. We will never ask for a password because we never set one.
This is a service for businesses and is not directed at children.
If this changes, the date at the top changes with it. We will not quietly start collecting something this page says we do not.
Questions about any of this: anthonymlacey@yahoo.com. Roaring Ripple is based in Tampa Bay, Florida.