Your report should be useful. Your data handling should be clear.

Who runs PageAnalyser

PageAnalyser is owned and operated by Arranz Group Ltd. Arranz Group Ltd is the data controller for PageAnalyser report requests: it decides why and how this information is used. For privacy questions or requests, email info@arranzgroup.com.

What we collect

When you request a report, we collect the public page URL and your email address. The URL is scanned. We store your email with the request and use a keyed hash of it to enforce the one-retained-request-per-email limit. Only if you opt in, we may also use your email to send marketing emails. Your email is not sent to the public website you submit and is not used to generate the report.

The optional marketing checkbox does not affect your report. We save its exact wording, version, source, and time only if you tick it; an unticked box is not recorded as consent.

For service security, the application stores a keyed hash of your connection IP address rather than the raw address. It also stores a hash of your browser’s user-agent string and the page path the request came from. The web server may separately keep connection logs, depending on its configuration.

The scanner checks one public HTML page. The stored report can include the requested and checked URLs, page title, headings, selected metadata, response timing, structured-data types, and findings. We do not store the full HTML response.

A random report-access token stays in your current browser tab so the service can check progress and show your result. The database stores a hash of that token, not the token itself. The request form also uses a security session cookie; see Cookies.

PageAnalyser loads Matomo analytics from analytics.arranz.org on each public page. When no cookie choice has been saved, the first page view is sent without Matomo cookies before the choice appears. If you choose “Mandatory cookies only”, page views and link or download activity continue to be measured without optional cookies. If you choose “Allow optional cookies”, Matomo may use cookies to recognise returning visits.

The JavaScript tracker may collect the page address and title, referring page and campaign details, date and time, local time zone, browser language and type, operating system and device type, screen resolution, external-link clicks, file downloads, page generation time, and your IP address. It also checks browser capabilities, such as supported plugins, and creates a short-lived browser configuration identifier. The tracker code reports page views and link or download activity. It does not read or send report form fields, the URL you enter for analysis, your email address, report access tokens, or report contents. It does not configure advertising, cross-domain tracking, form analytics, or session recordings.

Matomo tracking requests include your IP address. Matomo can mask IP addresses, and its default is to mask the last two bytes before storage, but we have not verified the setting on this instance. If IP-based geolocation is enabled, the full address may be used for the location lookup unless the instance is configured to use the masked address.

How we use your information

• To prepare the report you request, performance of the contract you ask us to provide. We use the page URL to queue the scan. Your browser retrieves the result with a separate random access token stored in that tab.
• To protect the service, legitimate interests. We use keyed hashes to rate-limit requests and apply the one-retained-request-per-email limit. Our interest is keeping the service reliable and preventing misuse.
• To send marketing emails, consent. We only record this choice if you actively tick the optional checkbox. PageAnalyser is not currently sending marketing emails. You can withdraw consent or object to direct marketing at any time by emailing info@arranzgroup.com.
• To improve PageAnalyser, Matomo analytics. We use page-view, link, and download information to understand which pages attract visits, how visitors arrive, and where they navigate or leave. Your cookie choice controls optional analytics cookies, it does not turn off cookieless tracking. We do not use Matomo for advertising or cross-site profiling. The lawful basis and settings for cookieless analytics must be confirmed for the active deployment.

We do not use the report to evaluate you or make decisions about you.

What happens when we check a page

After you submit a URL, PageAnalyser checks one public page and may follow up to three redirects to reach it. It does not send your email address or other form details to the website. The website may record the page request in its own server logs.

The report is an automated first pass on the page’s public HTML. It does not access private analytics or search accounts, and it does not store the whole page. See Terms for the report’s limits.

Who may handle the information

PageAnalyser runs on web-server, database, and hosting infrastructure selected for the active deployment. The providers may handle information on Arranz Group Ltd’s behalf to run and secure the service. The provider, processing region, and any applicable transfer safeguards depend on that deployment. Contact info@arranzgroup.com for the current hosting details.

Matomo tracking requests go to the instance at analytics.arranz.org. Arranz Group Ltd uses that instance for PageAnalyser analytics. The hosting provider, processing region, and any transfer safeguards are not identified by the tracker code and must be confirmed with the analytics administrator.

We do not sell report-request information or use Matomo analytics for advertising.

The web server may keep separate connection logs, including IP addresses. Those logs are configured outside PageAnalyser; contact us for the current log-retention period.

How long we keep it

Report access expires 90 days after a request. When the worker runs, or when a later report request triggers cleanup, the service deletes the expired request, its report, and any linked marketing-consent record. The time between expiry and deletion depends on when one of those cleanup steps next runs.

The keyed hashes used for connection-rate limiting are removed when they are more than 24 hours old during cleanup. Server logs may be handled separately; contact us for their current retention period.

Matomo keeps detailed visit records separately from aggregated reports, and each can have its own retention period. The current periods depend on the settings of the instance at analytics.arranz.org; they are not specified in the tracker code. They are separate from the 90-day report-access period.

Your choices and rights

Depending on the data-protection law that applies to you, you may be able to ask us for a copy of your information, correct it, delete it, restrict its use, object to its use, or receive a portable copy. You can object to direct marketing or withdraw marketing consent at any time by emailing info@arranzgroup.com; doing so does not affect your report.

When no cookie choice has been saved, the first page view is sent before the choice appears. You can choose “Mandatory cookies only” or “Allow optional cookies”. Mandatory cookies only keeps page-view and link measurement running without optional cookies. The footer’s “Cookie settings” control lets you change your choice later. This version does not provide an on-site control to stop cookieless analytics. To object to analytics processing or ask us about visit records stored in Matomo, email info@arranzgroup.com.

If you are in the UK, you can raise a concern with the Information Commissioner’s Office. If you are elsewhere, you can contact the data-protection regulator where you live.

Keeping information safe

The application uses hashed report-access tokens, request limits, request checks, and secure session-cookie settings. Server and database access controls are configured separately when the service is deployed. No online service can promise that information is completely risk-free.