LandercheckThe comprehension score for landing pages
Draft for legal review · pink = needs your input

Privacy policy

Draft, not yet in force · [effective date]

This policy explains what Landercheck collects when you test a page, read a report or buy tests, why we collect it, how long we keep it and what you can ask us to do with it. Landercheck is run by [Elements legal company name] (“we”), which decides how your data is used (the “controller”).

Who we are

[Elements legal company name], a company registered in [England and Wales] (company number [number]), registered office [address]. We're registered with the UK Information Commissioner's Office (registration number [ICO number]).

Questions about privacy: [privacy@domain]. We reply within one month.

The short version

  • You can test a page without an account. We keep the page address, the result and a hashed (scrambled) version of your IP address.
  • If you give us your email, we use it to send your report link and sign you in. There are no passwords.
  • Screenshots of the pages you test are deleted after 90 days.
  • We only use cookies we need to run the service. No advertising or tracking cookies.
  • We never sell your data, and we only email you about Landercheck tips if you tick the box.

What we collect

WhatWhenWhy
The address of the page you test, screenshots and the text of that pageEvery testTo run the test and show your report
The visitors' answers, your score and reportEvery testTo show your results and keep them in your account
Your answers to the three quick questions (who the page is for, what it sells, what kind of thing it is)If you answer themTo check what the visitors understood
Email address, first name and roleWhen you ask for your full report, sign in, or buy testsTo send your private link, sign you in, and show colleagues who shared a report
Email addresses you type into the share formWhen you share a report by emailTo send that one email. We keep only a scrambled version afterwards, to enforce our sending limits
A scrambled (hashed) version of your IP address and a random browser tokenEvery visit that starts a testTo stop abuse: one free test each, and daily limits
Purchase details: pack, price, currency, country, and the last four digits and type of your card (from Stripe)When you buy testsTo give you your tests, handle refunds and keep tax records
Basic usage figures with no personal identifiers [if we use privacy-friendly analytics]When you visit the siteTo see which pages work and fix problems

Pages you test may include other people’s details

Landing pages sometimes show names, photos or quotes from real people (for example, testimonials). When you test a page, we capture it once, as any visitor would. We hide the brand name from our simulated visitors, use the capture only to produce your report, and delete the screenshots after 90 days. If your details appear on a page someone tested and you'd like the capture removed sooner, email [privacy@domain].

Please only test pages that are public. We never log in, submit forms or pay on the pages we test.

Why we can use your data (our lawful bases)

  • Running the service you asked for (contract): tests, reports, your account, purchases and share emails you send.
  • Our legitimate interests: preventing abuse and fraud, keeping the service secure, and improving our scoring method. We use aggregated results across many pages to benchmark scores, never with your name or email attached.
  • Legal obligations: keeping purchase records for tax.
  • Your consent: occasional tips on landing pages from Elements, only if you tick the box. You can unsubscribe in any email.

Our simulated visitors are AI

Our “visitors” are AI models, provided by Anthropic. To run a test, we send them screenshots and text of the page you tested. Under our agreement with Anthropic, this data isn't used to train their models [confirm against the commercial terms]. Your score is produced automatically, but it has no legal or similarly significant effect on you, and you can always ask us about a result.

Who we share data with

We use these service providers, who process data only on our instructions:

ProviderWhat forWhere
SupabaseDatabase, sign-in links, stored screenshots[region, e.g. London, UK]
NetlifyHosting the website and server functions[region], with a global network
[Google Cloud Run / Fly.io]Running tests in a browser[region]
AnthropicThe AI models behind the simulated visitors and summariesUnited States
StripePayments (we never see your full card number)United States and Ireland
ResendSending report links, sign-in links and share emailsUnited States
CloudflareBot check on the test form (Turnstile)Global
[Plausible Analytics][Cookie-free visit statistics][EU]

If you claim free tests from a shared report, the person who shared it sees only counts (how many people they shared with, and how many ran their own test). They never see your email address unless they typed it in themselves.

We'll share data with authorities only where the law requires it.

International transfers

Some providers are in the United States. Where data leaves the UK or the European Economic Area, we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or on the provider's certification under the UK Extension to the EU–US Data Privacy Framework.

How long we keep it

DataKept for
Screenshots of tested pages90 days
Scores, reports and visitor answersUntil you delete them or your account. Results from tests without an account are kept for [12 months]
Your account (email, first name, role)Until you delete your account
Email from the report form, if you never sign in again[24 months] from your last activity
Scrambled IP addresses and browser tokens[12 months]
Purchase records6 years, for tax law; your name and email are removed when you delete your account
Scrambled share-email addresses[12 months]

Your rights

You can ask us to: see the data we hold about you; correct it; delete it; limit or object to how we use it; and give you a copy to take elsewhere. You can delete your account and all your tests yourself, any time, from your account page.

Email [privacy@domain]. We may ask you to confirm it's you. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Cookies and similar storage

We use only what's strictly needed to run Landercheck, so we don't show a cookie banner. If that ever changes (for example, advertising measurement), we'll ask for your consent first.

NameWhat it doesHow long
lc_at, lc_rtKeep you signed in30 days
lc_nextRemembers where to take you after you click a sign-in link1 hour
lc_bA random token that stops the free test being claimed repeatedly1 year
lc_adminAdmin sign-in (staff only)8 hours
lc_cur (stored in your browser)Remembers the currency you pickedUntil you clear it
lc_via, lc_code, lc_url, lc_run, lc_answered, lc_pending (stored in your browser)Remember the share link or code you arrived with, the page you were testing and the test you started, for this visitUntil you close the tab, or clear it
Cloudflare TurnstileChecks you are a person, not a bot, when you start a testFor the check only

Payments happen on Stripe's own checkout page, which sets its own cookies under Stripe's privacy policy.

Children

Landercheck is for businesses and isn't meant for anyone under 18. We don't knowingly collect children's data.

Security

Data is encrypted in transit and at rest. Report links are long and random, and we store only scrambled versions of sign-in links, share links and IP addresses. Access to our systems is limited to the people who need it, and admin access needs both an emailed link and a password.

Changes to this policy

If we make an important change, we'll say so on this page and, if you have an account, by email before it takes effect.