Privacy Policy
This policy explains what data BotReady (botready.app) processes when you use the site, why, and what you can do about it.
Last updated:
Who is responsible
The service is operated by BotReady. For any privacy question or request, write to contact@botready.app.
Data we process
- Account data: email address, name, a salted hash of your password (never the password itself), interface language, country and your plan. If you sign in with Google, we receive your Google account identifier, email address and name from Google.
- What you check: the URLs and domains you enter, the tool you ran and the time. For signed-in users this is linked to the account to show your history. For visitors without an account it is linked to a shortened one-way hash of the IP address, used only to count the daily limit.
- Saved work: audit reports, monitored sites and alerts you choose to keep in your account.
- Cloudflare API token: if you connect Cloudflare analytics, we store your read-only token encrypted and use it only to load your statistics. It is deleted when you disconnect it or delete your account.
- Request log: IP address, approximate location (country, city, network), browser and device type, referring page, the page requested and the response status.
- Usage statistics: page viewed, scroll depth, reading time, clicks on certain links and page speed metrics, with country and device type. These records contain no cookie identifier and no IP address.
- Microsoft Clarity: Clarity records clicks, scrolling and session replays so we can improve the site. Text you type and your name and email in the account are masked. Without your permission it works without cookies. Microsoft processes this data under its own privacy statement.
Why we process it
- To provide the service you asked for: run checks, keep your account, history, saved audits and monitoring (performance of a contract).
- To keep the service safe and fair: daily limits, rate limiting, protection against abuse and attacks (legitimate interest).
- To understand which tools and pages are useful and to fix errors (legitimate interest).
- To answer your messages and requests.
Cookies and local storage
We use cookies that are needed for the site to work. With your permission we also use Microsoft Clarity analytics cookies. There are no advertising cookies.
- br_s — keeps you signed in. Set at sign-in, expires after 30 days.
- br_u — stores your name and plan so the interface shows the right state. Expires after 30 days.
- br_g — protects Google sign-in against forgery. Expires after 10 minutes.
- Local storage in your browser keeps the light or dark theme, your cookie choice (br_consent) and the result of your last audit of a site, to show what changed. This data stays in your browser.
- _clck and _clsk — Microsoft Clarity analytics cookies, set only if you allow analytics. _clck lasts up to 1 year, _clsk 1 day. You can change your choice any time with “Cookie settings” at the bottom of the page.
Who receives data
We do not sell personal data and do not share it for advertising.
- Cloudflare — hosting, network, database and, for the Query Fan-out tool, AI processing of the query you enter. Cloudflare processes data on our behalf and may do so outside your country.
- Google — only if you choose to sign in with Google.
- The websites you check receive requests from our servers, not from your browser. They do not receive your IP address.
How long we keep it
- Account data, saved audits and monitored sites: until you delete them or your account.
- Request log: 90 days.
- Usage statistics: 180 days.
- History of checks: up to 12 months.
- Sign-in sessions: 30 days.
Your rights
You can ask for a copy of your data, have it corrected or deleted, object to processing or restrict it, and receive your data in a portable format. You can delete your account at any time in the account settings: this removes your profile, sessions, saved audits, monitored sites, alerts and connected Cloudflare token.
To use any of these rights, write to contact@botready.app. If you are in the EU, the UK or Ukraine, you also have the right to complain to your data protection authority.
Security
Connections use HTTPS. Passwords are stored as salted hashes, session identifiers are stored hashed, and Cloudflare tokens are encrypted. No system is perfectly secure; if a breach affects your data, we will inform you as the law requires.
Children
BotReady is a tool for site owners and professionals and is not intended for children under 16.
Payments
Paid plans are paid through PayPal, with a PayPal balance or a card. PayPal processes the payment under its own privacy policy; we never see or store card numbers. From PayPal we receive the subscription identifier, the plan, its status and the payment dates, and link them to your account.
Changes
If we change this policy, we will update the date at the top.