Privacy Policy
Last updated:
In short: the container file is never uploaded to any server — the audit runs in your browser. We record basic data about audits and visits for statistics, and about your account if you create one.
1. What we do not collect
- Your container export file: it is read in your browser only and never sent to or stored by us.
- The full content of tags, code and settings.
2. What we collect
- Per audit: container ID and name, the domain inferred from it, type (web or server), score and issue counts, and time.
- Per visit: traffic source (UTM parameters, referring site, and the type of ad click identifier such as gclid — not its value), landing page, device type, country and language.
- Random identifiers stored in your browser (browser and session IDs) so we can tell visits and audits come from the same person.
- If you create an account: name, email, a hashed password (we cannot see it), sign-up and last login times, and reports you choose to save. A saved report contains the audit results and names of affected tags; any token is stored masked.
- If you request help: what you enter in the form, plus the report summary if you choose to attach it.
- Technical data: your IP address is converted into an irreversible hash used only for abuse prevention and rate limiting. We do not store the IP itself.
3. How we use it
- To run the Tool, save your reports and email them to you.
- If you request help: the request details and audit summary are shared with Google Tag Manager specialists we work with, so they can contact you with an offer for the paid service. Your account data and saved reports are not shared with them.
- Internal statistics to improve the Tool and understand where visitors come from.
- To protect the service from abuse.
We do not sell your data or use it for third-party advertising.
4. Cookies and browser storage
- A login cookie if you have an account (30 days).
- Local storage for the browser and session IDs, language and theme, and your last help-form details.
- We do not use advertising cookies or third-party trackers.
5. Third parties we rely on
- Cloudflare: hosting, database, and cookieless aggregate visit statistics (Cloudflare Web Analytics).
- Resend: sending emails (reports and password resets).
- Google Fonts and jsDelivr: fonts and platform icons.
6. Retention and deletion
We keep data while your account exists or as long as needed for the purposes above. You can delete any saved report yourself under "My reports". To delete your account and all your data, email .
7. Security
We use reasonable security measures such as password hashing and encrypted connections (HTTPS). No system is 100% secure, and we cannot guarantee absolute security.
8. Changes
We may update this policy; the last updated date is shown above.
9. Contact
Privacy questions: