LAST UPDATED: 30 JUNE 2026
Welcome to Sightful.
This Privacy Policy explains how we collect, use, protect and share information when you visit https://www.sightful.info or use our broken link detection service (the "Service").
We use your data solely to provide and improve the Service. By using the Service, you agree to the collection and use of information as described in this policy. Unless otherwise defined here, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.
Account information. When you register, we collect your email address. Your password is stored exclusively as a secure hash by our authentication provider (Supabase) and is never accessible to us in any form.
Scan URLs. When you submit a URL for scanning — via the web interface or the API — that URL is processed to detect broken links. URLs submitted through scheduled scans are stored to enable recurring checks and to detect changes between scans.
API usage data. For API key holders, we record the number of calls made in the current calendar month, the date of the last call, and your subscription tier. We store only a SHA-256 hash of your API key — the key itself is shown to you once at creation and is never stored by us.
Subscription and billing data. We record your subscription tier and status. Payment card details are handled entirely by Stripe and never pass through or are stored on our servers.
Contact form submissions. If you contact us via the contact form, we receive your email address and the content of your message.
Usage data. Our servers automatically log standard technical data including your IP address, browser type and version, pages visited, and the date and time of requests. This data is used for security monitoring and service operation.
We do not use advertising cookies, third-party tracking scripts, or behavioural analytics tools.
We use the data we collect for the following purposes:
We do not send marketing or promotional emails. We do not sell, rent, or share your Personal Data with third parties for advertising purposes.
We retain your Personal Data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by law.
Account data (your email address and authentication record) is retained while your account is active. If you request deletion of your account, we will delete your Personal Data within a reasonable period, subject to any legal retention obligations.
API key records (hashed key, usage counters) are retained while the key is active and deleted when you revoke it.
Server log data is retained for a short operational period for security and debugging purposes and is then deleted.
We take reasonable technical and organisational measures to protect your Personal Data, including:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
Your information, including Personal Data, may be transferred to and maintained on computers located outside of your country or other governmental jurisdiction where data protection laws may differ.
Our primary infrastructure is hosted in the United States (Heroku/Salesforce). Our authentication and database provider (Supabase) and email delivery provider (Resend) also operate infrastructure in the United States. Our JavaScript rendering provider (ScrapingBee) operates infrastructure in the European Union.
By using the Service and submitting your information, you consent to this transfer. We take steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.
We do not sell or rent your Personal Data. We may disclose your information only in the following limited circumstances:
We use the following third-party providers to operate the Service. Each has access to your data only to perform their specific function and is obligated not to disclose or use it for any other purpose.
Paid subscriptions are processed by Stripe, Inc. We do not store or have access to your payment card number, expiry date, or CVV at any point. That information is entered directly into Stripe's secure checkout and governed by their Privacy Policy.
Stripe adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council. Their Privacy Policy can be viewed at stripe.com/privacy.
If you are a resident of the European Union or European Economic Area, you have data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to exercise these rights by contacting us.
You have the right to:
We may ask you to verify your identity before responding to such requests. Please note that some data is necessary to provide the Service and deletion may result in loss of access.
You also have the right to lodge a complaint with your local Data Protection Authority in the EEA.
In accordance with the California Online Privacy Protection Act (CalOPPA):
Do Not Track. We honour Do Not Track signals. We do not plant tracking cookies or use advertising when a Do Not Track signal is detected in your browser.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information.
Right to know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and any third parties with whom it is shared.
Right to delete. You may request deletion of the personal information we hold about you. Note that some data may be required to provide the Service.
Right to opt out of sale. We do not sell or rent your personal information to any third party for any purpose. You are the sole owner of your Personal Data.
We will not discriminate against you for exercising any of the above rights. To make a request, please contact us. The CCPA took effect on 1 January 2020.
Our Service is not directed to anyone under the age of 18. We do not knowingly collect Personal Data from children. If you are a parent or guardian and become aware that your child has provided us with Personal Data, please contact us and we will take steps to remove that information.
Our Service may contain links to third-party websites that are not operated by us. If you click a third-party link, you will be directed to that site. We strongly advise you to review the privacy policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party site or service.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date at the top.
Where appropriate — for example, if we begin collecting new categories of data or sharing data with new third parties — we will also notify you via email or a prominent notice on the Service before the change takes effect.
We encourage you to review this page periodically. Changes are effective when posted.
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to request access to, correction of, or deletion of your Personal Data, please contact us via the contact page.