Privacy Policy
Last updated: 20 April 2026
Clunky AI is built around public website scans, emailed reports, editorial publishing, and benchmark reporting. We collect the minimum personal data needed to run those surfaces.
What we collect
- URLs submitted for scans and the raw signals produced by a scan.
- Email addresses submitted for reports or scan follow-ups.
- Optional industry and builder information submitted with a scan.
- Hashed IP addresses for abuse prevention and dataset integrity.
We do not store raw IP addresses. IPs are hashed with a server-side salt before storage.
How we use scan data
Every scan contributes to the Clunky Index. We retain scan rows indefinitely so the benchmark can track methodology versions and trends over time. Public rollups are aggregated; we do not publish personal email addresses.
Report delivery and scan follow-ups are handled separately from the scan itself. You can unsubscribe from future follow-up emails with one click.
Analytics
The default analytics posture is privacy-first and cookieless. We use event plumbing for product improvement, and production analytics should use Plausible or an equivalent cookieless service.
Processors
Depending on environment configuration, we may use Supabase, Resend, Vercel, Fly.io or Railway, Google PageSpeed Insights, OpenAI for narrative text, and Plausible. LLMs are not used to produce numeric scores.
Your rights
If you are in the UK or EEA, you can request access, correction or deletion of personal data such as your email address. Scan rows may be retained in anonymised or aggregated form to protect benchmark integrity.
Contact
Email: privacy@clunky.ai