Privacy policy

This explains what Roastly (“we”) collects when you use getroastly.app, why, and who helps us process it. Questions? Email hello@getroastly.app.

What we collect

• The URL you submit, a screenshot of that public page, and basic page data (title, description, a rough speed signal).
• The roast we generate and its score.
• Your email address, only if you buy a report or contact us, so we can deliver it and reply.
• Payment details are handled entirely by Stripe. We never see or store your card number.
• Your IP address, used briefly for abuse protection (rate limiting).
• Anonymous usage analytics (through PostHog): page views and key steps, such as a roast started or a purchase completed, so we can see where people drop off. We use no cookies or browser storage for this, we don't record sessions or anything you type, and we strip private links (a roast's address and report links) before anything is sent. We respect your browser's Do Not Track setting. Events recorded on our servers never include your email, the site you submitted, or its name.
• Where you came from: the website or campaign link (for example “google” or a campaign name) that brought you here, kept with the roast you run so we can tell which channels work. It contains no personal details.
• How much AI processing a roast used (a token count), so we can manage our costs.

Public gallery

Roasts are private by default. A free roast appears in the public gallery only if the person who ran it switches that on, and they can switch it off at any time. A featured roast shows the screenshot of the page, the three findings, the site's domain name and a few measured page facts. It never shows the name or email of the person who ran it, and never a paid report. Featured roasts can be found by search engines. If your site is featured and you want it removed, email us and we'll take it down promptly. See the terms for the details.

Who processes your data

• Anthropic (AI analysis of your page screenshot and text).
• Stripe (payments).
• Resend (delivering your report and replying to enquiries).
• Vercel and our database provider (hosting and storage).
• PostHog (product analytics).

Only submit sites you're allowed to

We only fetch publicly accessible pages. Please only submit sites you own or have permission to have reviewed.

Your choices

You can ask us to access, correct or delete your data by emailing us. We'll respond promptly. We keep purchase records for as long as needed for accounting and tax.

Changes

If we change this policy we'll update the date above.