Privacy policy

We keep as little as the product needs: the results of a check, for 30 days. No ad pixels, no selling, no sharing.

Effective October 27, 2026

Who we are

Pewterkit Check is a product of Pewterkit. For any question about this policy or your information, write to hq@pewterkit.com.

What we keep

• Check results. When you check a site, we keep the results we derive from its public pages: each finding, its status and the short evidence line we show you (for example a header value or a page title). We do not keep copies of the pages we read.
• Re-checks. If you buy fixes, we keep your re-check results.
• How long. Every one of these records is deleted automatically 30 days after it is made.
• Delivery logs. Our hosting provider, Cloudflare, processes your IP address and browser details to deliver the site and limit abuse, for example to cap how many checks one address can start in a few minutes.

Payments

Payments are handled by Stripe. You enter your card details on Stripe's checkout page, and we never see or store your card number. Stripe tells us the payment went through and gives us an order reference, which opens your fixes. Stripe's own privacy policy covers what Stripe keeps.

Cookies and trackers

We run no advertising pixels, no analytics trackers and no third-party cookies. When you run a check, we set one first-party cookie (a random ID, kept 30 days) so a repeat check of the same site shows the same prices.

Selling and sharing

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We pass information only to the services that run Pewterkit Check for us (Cloudflare for hosting, Stripe for payments), for that purpose only, or when the law requires it.

Your Privacy Choices

You can ask us to show you, correct or delete what we hold about you, and to confirm we do not sell or share it. Email hq@pewterkit.com with the site address you checked or your order reference so we can find the records. We answer every request and never charge for it. If you are in the UK or the EU, you can also complain to your data protection authority (in the UK, the ICO).

Global Privacy Control

We honor Global Privacy Control. If your browser sends the GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information. Because we run no ad pixels and sell nothing, your experience stays exactly the same.

Do Not Track

We do not track visitors across other sites, so every visitor gets the same treatment a Do Not Track signal asks for, whether or not your browser sends it.

The sites you check

A check reads only what a visitor's browser would load from the site you enter. How our scanner works lists every request it makes.

Children

Pewterkit Check is a tool for people who build and run websites. It is not directed at children under 13, and we do not knowingly collect their information.

Changes

When this policy changes, we update the effective date at the top of this page.