Privacy
What we collect, what we don’t.
Straightforward summary of how AvocadoScore handles data. Last updated 2026-05-25.
What a scan captures
When you submit a URL, AvocadoScore fetches publicly-available pages on that site through Google's PageSpeed Insights API and directly via HTTP for the SEO / AI Readiness checks. We collect:
- The URL you submitted and pages discovered via sitemap / homepage links
- Performance metrics returned by Google PageSpeed Insights
- HTML markup of each scanned page (for the SEO + AI checks)
- Content of
robots.txt,llms.txt, sitemap files
We do not attempt to access authenticated areas, bypass paywalls, or scrape user data. Our crawler identifies itself in the User-Agent header.
Your data
- Email — we collect your email in four places: at paid checkout (via Stripe), if you ask to be notified when a scan finishes, if you sign up to watch a site’s llms.txt, and when you request a dashboard sign-in link. Used to send your report, magic-links, and scan-related updates. Never sold.
- Payment data — handled entirely by Stripe. We never see or store your card number.
- Browser data — we set HttpOnly cookies to gate access to paid reports and to keep you signed in to your dashboard. Free-preview reports use no cookies.
Where reports live
Each scan's report sits at /r/<uuid>. Free previews are public by link — anyone with the URL can view them. Paid reports require the magic-link emailed to you at checkout, and the link sets a 90-day cookie scoped to that one report.
We retain reports until you ask us to delete them. Email us with your scan ID (or the email you bought with) and we'll remove the scan and your address, usually the same day.
What we don’t do
- No advertising trackers, no third-party analytics pixels.
- No selling or sharing of customer data with anyone.
- No retention beyond what's needed to provide the service.
Cookies
- Per-report access cookie — set when you click a report magic-link, scoped to that one report, 90-day expiry, HttpOnly.
- Dashboard session cookie — set when you sign in, lets you see all your scans, 90-day expiry, HttpOnly.
- Theme preference — remembers light/dark mode. No PII.
Your rights
You can request deletion of any paid scan or your email from our records at any time: privacy@avocadoscore.io.
Contact
Questions about this policy: privacy@avocadoscore.io.