One field. No cookie, no tracker.
This page is about the website you are reading. What the paid service touches is a separate and longer document, at /policies/. Everything below can be checked from your own browser: open the developer tools and look at what loads.
No consent banner is shown because there is nothing to consent to. Your browser may remember a scroll position; we do not read it.
No Google Analytics, no pixel, no session recorder, no A/B testing tool, no chat widget.
The firm name and city you type, if you press the button. Nothing is sent while you type.
Google Fonts, for the typefaces. Google Maps, to read the public listing you asked us to read. Nothing else.
What is collected, and what happens to it
Question, then the answer that applies to this website today.
What happens when I type a firm name and press the button?
The text you typed is sent to our server, which opens that firm's public Google listing and counts the reviews with no reply. The text is kept with the result for 24 hours so that a second visit does not re-read the same listing, then discarded. It is not attached to you, and it is not used to contact you.
Verifiable: nothing leaves the page until you press the button.
What does the server log?
The usual web server record: the page requested, the time, the browser's user-agent string, and the IP address that made the request. Kept 30 days for security and to count visits, then deleted. Not sold, not shared, not enriched with anything.
Standard practice; the retention period is an undertaking.
What about the link in an email you sent me?
It carries a token that identifies which report it belongs to, so that a click can be counted. That tells us the report was opened. It does not track you across other sites, and there is no pixel in the email itself.
The token is visible in the URL: it is the ?r= parameter.
Are the fonts a privacy problem?
The typefaces load from Google Fonts, which means Google sees the request. If that matters to you, the site is designed to be readable with the fallback fonts already on your machine, and blocking fonts.googleapis.com changes nothing else on the page.
Verifiable: block the domain and reload.
How do I have something deleted?
Write to the address in the footer. A cached count is gone within 24 hours anyway; a server log within 30 days. If you were sent a report and want it taken down, say so and it is removed from the host the same day.
Undertaking.
I am in California. What are my rights?
Under the CCPA as amended, you may ask what personal information we hold about you, ask for it to be deleted, and ask us to correct it. In practice we hold two things: a server log entry, and — if you were sent a report — your business email address. We do not sell or share personal information, and we have never done so; there is therefore no “Do Not Sell” mechanism to offer, because there is nothing being sold. Write to the reply address and the request is honoured within the statutory delay.
Cal. Civ. Code §1798.100 et seq. Five of the markets we measure are in California.
Do you profile people or take automated decisions about them?
No. Nothing on this site scores, ranks or decides anything about a person. What is measured is a firm's public listing, and what is published in aggregate never names a firm — let alone a person.
Stated because the question follows from the previous one.
It is not a description of the paid service. That service reads a client's Google listing and publishes replies under their name; what it touches, keeps and can see is set out at /policies/.
It describes the site as it works on the date in the footer. If a script, a cookie or a third party is ever added, this page changes first.