Last Updated: November 4, 2026
SiteGrader ("SiteGrader," "we," "our," or "us"), a division of Morgan Ventures, Inc., grades websites: it reads what a website's public homepage serves, scores it against similar sites, and lists what to fix. Members can follow the sites they look after and hear what changed by email or Slack. This Policy explains what we collect through www.sitegrader.com, our waitlist, accounts, and emails, how we use it, and the choices you have.
Two kinds of information matter here. Information about you, such as your email address, is covered by this Policy. Information about websites, which SiteGrader reads from their public homepages and publishes as reports, is described under Information About Websites.
Waitlist. If you join the waitlist we store your email address and the time you joined, along with your IP address, approximate location (city, region, and country), the name of your network, browser and device details, and the website that referred you to us, if any. We use these to contact you about availability, to prevent abuse, and to understand where interest in SiteGrader comes from.
Accounts. Account holders provide an email address and a name. We also store the approximate location (city, region, and country) the account was created from, a time zone they can change, the sites they save and follow, the fixes they mark done, their alert and weekly summary settings, and a Slack address if they add one. There are no passwords: to sign in, we email a one-time code and link to the account's address, and we keep a record of each sign-in (how it was made, when, and the IP address) for security and troubleshooting.
Signing in with Google or GitHub. If you choose to create or sign in to an account through Google or GitHub, that provider asks for your permission and then confirms your email address and sends us your name. We use these only to create your SiteGrader account and sign you in, and we keep the same record of the sign-in as for an emailed code. We do not store the provider's identifier for your account or other profile details. We never receive your Google or GitHub password; we do not request access to your contacts, files, messages, or code repositories; and we do not keep the provider's access token once sign-in is complete.
Sites you look up. When you grade a site or use a free tool, we receive the address you enter, along with your IP address, which we use to apply daily limits and prevent abuse.
Visits. When you visit our website we record your IP address, approximate location (city, region, postal code, and country, as our network provider Cloudflare reports it), the name of your network, browser and device details, the website that referred you to us, if any, and the pages you view, along with your account if you are signed in.
SiteGrader reads the public homepage of a website, its robots.txt, and public records such as its certificate and DNS, and publishes what it found as a report: a grade, the evidence behind it, short excerpts, and a picture of the homepage's first screen. In production we do not store a homepage's full HTML. Reports are public: anyone can open and share them, and search engines may list them. For sites that members follow, SiteGrader checks the homepage, robots.txt, certificate, and DNS about once a day and the domain's registration about once a week, and keeps the latest readings and a record of what changed. SiteGraderBot explains what our crawler requests and why.
We publish this as information about websites rather than about people, but a homepage can contain a person's name. If a SiteGrader report shows personal information about you, ask us to remove it. A site's owner can hide its reports and stop SiteGrader grading or checking it at Remove a site, free and without an account, or with a robots.txt group for SiteGraderBot. We keep the site's address and how its owner proved control, so that it stays hidden.
We use a first-party session cookie to keep the site working and to keep account holders signed in, and an optional remember-me cookie that lasts up to 30 days from a device's last visit; we keep a hashed copy of it with the browser's description so you can see and sign out your devices in Settings. A device you have signed in on also keeps a cookie that lets it skip the human verification check. We use Google Analytics to measure how our own website is used; it sets its own cookies and sends Google usage information such as the pages viewed, approximate location, and browser and device details. It does not run on the pages that links in our emails open. Sign-in and other forms may use Cloudflare Turnstile to block automated abuse. We do not show advertising or use third-party advertising cookies, and we do not respond to "Do Not Track" signals.
We do not sell personal information.
At your direction. If you add a Slack address, we send your alerts and summaries there. You are responsible for the destinations you configure.
Public reports. Reports, rankings, and the evidence behind them are published on SiteGrader. They describe websites and never show who looked a site up or who follows it.
Service providers. We use a small number of providers to run the Services: hosting, content delivery, and abuse protection; transactional email delivery; services that retrieve and render public pages; and analytics for our own website (Google Analytics). Google's services also measure a page's speed and real visitors' experience of it, and check whether Google lists a site as unsafe; those requests carry the address of the site being checked, not information about you. These providers process data only to provide their services to us.
Sign-in providers. If you sign in with Google or GitHub, that provider knows you used it to sign in to SiteGrader and handles your information under its own privacy policy. We do not send your saved sites, settings, or other SiteGrader data to the provider, and we do not use or share the profile information it gives us for advertising.
Legal and safety. We may disclose information to comply with law or lawful process, to protect the rights, safety, or property of any person, or to enforce our agreements. Business transfers. If our business is sold, merged, or reorganized, information may transfer as part of that transaction under this Policy's protections.
We retain waitlist entries until launch outreach is complete or you ask us to remove you. We retain account data for as long as you have an account with us. Sign-in codes and links are stored only as hashed copies and deleted after two days. Reports are kept as each site's public history; a site its owner has hidden stays hidden, and we keep the record that hides it. We honor verified deletion requests as required by applicable law. When data is deleted, copies may persist briefly in backups before rolling off.
You may request access to, correction of, or deletion of your personal information by contacting us; we respond as applicable law requires. Account holders can delete their account and sign out their devices in Settings, and turn off alerts and weekly summaries there or from any of those emails. We may still send non-promotional service messages about an account or its security. You can leave the waitlist at any time by asking us. If you signed in with Google or GitHub, you can remove SiteGrader's access at any time in that provider's account settings; this stops future sign-ins through it but does not delete your SiteGrader account or its data, which you can ask us to do. If a report shows personal information about you, ask us to remove it, and a site's owner can hide its reports at Remove a site.
We take reasonable technical and organizational measures to protect information. Every address is checked before SiteGraderBot requests it, and again at each redirect, so it never reaches private networks; sign-in codes and remembered devices are stored only as hashes; and account pages require signing in. No method of transmission or storage is completely secure, so please keep your email account and any sign-in provider account secure.
We store and process information in the United States. If you use the Services from elsewhere, you understand your information will be transferred to and processed in the United States.
The Services are not directed to children. If you are under 18, or the age of majority where you live, use the Services only with the consent of a parent or legal guardian.
We may update this Policy from time to time. When we do, we will revise the "last updated" date at the top of this document. Your continued use of the Services after changes are published means you accept the revised Policy.
Questions or requests about privacy? Contact us and we will respond as required by applicable law.
Terms of Service · Privacy Policy · Contact Us
© 2026 SiteGrader, a division of Morgan Ventures, Inc. All rights reserved.