Privacy policy
Updated: Sun Oct 04 2026 00:00:00 GMT+0000 (Coordinated Universal Time)
Approvalens scans public websites and sells reports about them. This policy explains what we collect while doing that. We collect as little as we can.
What we collect
The address you scan. We store the URL, the report we generate and a screenshot of the home page as it appears on a phone. Reports are reachable only through their unguessable link.
Your IP address. We store it next to each scan request to limit how many scans one visitor can start, which protects the service and the sites being scanned. It is not used for anything else.
Purchases. Payments are handled by Lemon Squeezy, which acts as the merchant of record. Lemon Squeezy collects your name, email, billing country and payment details under its own privacy policy. We receive the order number, the email address, the amount and which site the purchase unlocked. We never see your card details.
Analytics. If analytics is switched on, we use Google Analytics with IP anonymisation to count visits and see which pages are useful. You can block it with any content blocker; the site works the same.
We do not use advertising cookies and we do not sell or share personal data with advertisers.
What we do with the sites we scan
We fetch pages the way any visitor or search engine does: only public pages, at most 50 per scan plus a few files such as robots.txt, sitemaps and ads.txt. We identify ourselves with a standard browser user agent and, for a few requests, with Google's documented crawler user agents to test how your server answers them. We do not log in, submit forms or execute anything on your server.
How long we keep it
- Free scans: report and screenshot are deleted after 30 days.
- Paid reports: kept for 400 days so you can come back to them.
- Scan request logs with IP addresses: 30 days.
- Order records: as long as tax and accounting rules require.
Your rights
You can ask us to delete a report, to tell you what we hold about you, or to correct it. Write to hello@approvalens.com from the email address you used at checkout, or include the report link. Residents of the EEA, the UK and Türkiye (KVKK) have the rights their laws grant, including the right to complain to a data protection authority.
Processors
- Lemon Squeezy — payments and invoices (merchant of record).
- Our hosting provider — servers in the EU.
- Google Analytics — visit statistics, only if enabled.
Changes
If we change this policy we update the date at the top. Material changes are announced on the home page for 30 days.