Privacy Policy

• Account details from Google. When you choose "Continue with Google", Google shares your name, email address, profile photo and a Google account ID. We use the openid, email and profile permissions only; we cannot see your password, Gmail, Drive or anything else in your Google account.
• Audits you run. The website address you submit and the results of crawling and analysing that public site. Audits you run while signed in, or open after signing in, are saved to your account.
• Contact form messages. Your name, email, subject and message.
• Technical data. To prevent abuse we keep short-lived request counters keyed to a shortened form of your IP address, and we store a one-way hash of the IP address with contact form messages.

• cm_session: keeps you signed in for up to 30 days. Strictly necessary; set only after you sign in.
• cm_oauth: protects the Google sign-in step from forgery; deleted within 10 minutes.
• Your cookie-banner choice and the list of audits you ran are kept in your browser's local storage.

To run audits and show you their results, to keep your reports in your account, to reply to your messages, and to keep the service secure. We do not use your data for advertising and we do not sell or rent it.

• Google: sign-in.
• Vercel: hosting.
• Neon: database.
• FormSubmit: delivers contact-form messages to our inbox.

Account details and saved reports are kept while your account exists. Sessions expire after 30 days. Contact messages are kept as long as needed to handle your request. Ask us and we will delete your account and its reports.

You can sign out at any time, ask for a copy of your data, ask us to correct or delete it, or remove ContentMas from your Google account at myaccount.google.com/permissions. Email us and we will respond within 30 days.

ContentMas's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If we change this policy we will update the date above, and for significant changes we will tell signed-in users.