Privacy Policy
Effective date: March 20, 2026
Stackra is a free website audit tool operated by HorizonPlus. This policy explains what data we collect when you use Stackra, how we use it, who we share it with, and what rights you have over it.
We collect the minimum data needed to operate the service. We do not sell your personal data, and we do not use it for advertising.
Submitted URLs and Analysis Data
When you submit a website URL for analysis, we store that URL and the resulting analysis report in our database. Analysis reports include technical metrics, AI-generated narrative summaries, and a Growth Readiness Score. Reports are retained to support features such as history tracking and shareable report links. We do not store the full content of pages we crawl.
Account Data (registered users)
If you create an account, we store your name, email address, and a bcrypt-hashed password. We never store your password in plain text. Your email is used only to send analysis notifications and, if you request it, password reset links. You can delete your account at any time from your settings page, which permanently removes your account data from our database.
Server Logs
Our servers generate standard operational logs that include IP addresses, request paths, timestamps, and error messages. These logs are used for security monitoring, debugging, and service reliability. Logs are retained for up to 30 days.
Analytics
We use Google Analytics (GA4) to understand aggregate usage patterns such as which pages are visited and how long analyses take to complete. Google Analytics data is governed by Google's privacy policy. We do not pass personally identifiable information to Google Analytics.
What We Do Not Collect
- Payment or billing information (Stackra is free; no payments are processed)
- Device fingerprints or persistent tracking identifiers beyond session cookies
- The private content of websites behind authentication or paywalls
- Data from third-party sources about you
Stackra relies on the following third-party services to operate. Each service receives only the data necessary to perform its function.
| Service | Purpose | Data Sent |
|---|---|---|
| OpenAI | AI persona narrative generation | Publicly crawled website content and metrics (no user PII) |
| Google PageSpeed Insights API | Performance and accessibility metrics | Submitted URL only |
| Google Analytics (GA4) | Aggregate usage analytics | Anonymized page interaction data |
| Replit | Cloud hosting infrastructure | All application data (hosted environment) |
OpenAI's data handling for API usage is governed by OpenAI's API data usage policies, which state that API inputs and outputs are not used to train their models by default.
| Data Type | Retention Period |
|---|---|
| Analysis reports | Indefinite (supports shareable links and history); deleted on user request |
| Account data | Until account deletion |
| Session cookies | Browser session; max 7 days |
| Server logs | Up to 30 days |
EU and EEA Users (GDPR)
We process personal data on the legal basis of legitimate interest: delivering the website audit service you requested. If you have an account, we process account data on the basis of contract performance.
Under the General Data Protection Regulation, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to processing based on legitimate interest
- Request a copy of your data in a portable format
To exercise any of these rights, email us at luke.beck@horizonplus.co. We will respond within 30 days.
California Users (CCPA)
California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To submit a request, contact us at the email below.
For privacy questions, data requests, or concerns, contact us at luke.beck@horizonplus.co.
Stackra is operated by HorizonPlus. For questions about HorizonPlus, visit horizonplus.co.