Privacy Policy

Who we are

isthiswebsitelegit is a free website research tool. For data protection purposes the operator of this site is the controller. Contact: [email protected].

What we process, and why

The URL you submit. Used to perform the checks and generate your report. The resulting report, score, verdict, and gathered public signals are saved to our database and shown in the public directory. We do not tie that record to you, your IP address, or any account. Checking the same URL again updates the saved report.

Your IP address. Held transiently in memory for rate limiting, so a small number of checks per minute per address is enforced and upstream sources are not overloaded. Entries expire automatically within 60 seconds and are never written to disk. Legal basis: legitimate interest in keeping a free service available and preventing abuse.

Your theme preference.Stored in your browser's local storage on your own device so the site remembers light or dark mode. If you dismiss the optional app install suggestion, that choice is stored there too. This never leaves your device and we cannot read it. It is not a tracking cookie.

What we do not do

• No user accounts, signups or email collection.
• No advertising networks, no ad pixels, no behavioural profiling.
• No analytics or session recording tools.
• No stored history of who checked which site.
• No selling, renting or sharing of personal data. There is nothing to sell.

What we store publicly

Each completed check saves the website address, score, verdict, timestamp, and the full report (public signals gathered from RDAP, the page, Trustpilot, Reddit, and the Internet Archive). This appears in the directory so anyone can browse past reports. It is not linked to individual visitors.

Third parties involved in a check

Running a check necessarily makes requests from our server to the sources we read. These requests come from our server, not your browser, so your IP address is not disclosed to them:

• RDAP registry services, for domain registration records
• The website being checked, for its homepage and TLS certificate
• Trustpilot, for a public review profile
• Reddit, for public search results
• The Internet Archive, for capture history
• An AI provider, which receives only the domain name and the list of gathered signals. It never receives your IP address or anything identifying you.

We also load web fonts from Google Fonts, which means your browser connects to Google's font servers and they receive your IP address as part of that request. If you prefer to avoid this, a content blocker will prevent it; the site remains fully usable with system fonts.

Hosting and logs

The site runs on standard web hosting infrastructure. Our hosting provider may retain short lived operational request logs for security and reliability, which is normal for any website and outside our application. We do not add the submitted URL to application logs. Unexpected server errors are logged without the URL that caused them.

Retention

Checked site reports: kept in our database until manually removed or the service shuts down. Checking a URL again updates the saved report. Rate limit records: under 60 seconds. Theme preference: until you clear your browser storage. We do not retain who submitted a check.

Your rights

Under the GDPR and equivalent laws you have rights of access, rectification, erasure, restriction, objection and portability. Because we hold no accounts and no personal search history, in practice there is normally no personal data for us to retrieve or delete. You can still contact us at [email protected] with any request, including requests about a public report in the directory, and you may lodge a complaint with your local data protection authority.

Children

The Service is not directed at children under 13 and we do not knowingly collect personal data from them.

Changes

Material changes to this policy will be reflected in the date at the top of this page. See also our terms and disclaimer.