Privacy and data handling

Free checks and the crop tool

The checker sends the public URL you enter to our server, which requests the page and declared images. Submit public URLs only; avoid private documents, signed URLs, credentials and personal information. The bulk tool checks up to five submitted URLs. Its exports contain the results shown in your browser. The local crop inspector reads your selected image in your browser and does not upload it.

Optional repair report and workspace

To unlock the extended repair plan, we record your email, selected role, whether you opted into product updates, and the checked page URL. The plan downloads immediately; email delivery is not required. Product-update consent is optional and unchecked by default. The free preview and basic findings do not require an email.

A workspace uses a private browser-session cookie and a recovery key. Email alone cannot sign you in or merge workspaces. Keep recovery keys and agent keys private. Stored credentials are hashed; full new keys are shown to you once. Sessions expire after 30 days unless renewed through a new sign-in or restoration. Restoration revokes old sessions and agent keys; confirm your saved replacement recovery key to retire the old one.

Monitoring data

Monitoring stores site URLs, crawl state, usage counts, timestamps, selected metadata, image-response findings and changes. It does not store the fetched page's full HTML. Reports are accessible only through a workspace session or a scoped agent key. Pro report history is available for 30 days and Agency / API history for 90 days. The latest per-page baseline and account/billing records can be retained separately from that history to operate the service and reconcile purchases.

Pausing a monitor stops new scheduled work; it is not an account-deletion request. Contact support for data-access or deletion requests. We may need to retain transaction records or resolve an outstanding purchase before removing associated records.

Payments and providers

Stripe processes payments and subscription management. OGFixer stores the identifiers and status needed to associate a purchase with the correct workspace; it does not collect card details in its own forms. The service is hosted on Vercel and uses a private PostgreSQL database when workspaces are available.

The separate Starter image flow sends brand inputs to the configured Gemini service. Its email-delivery flow uses Resend when configured. Starter availability is displayed before checkout, and existing purchases retain their original recovery flow.

Analytics and browser storage

The site uses Google Analytics and Vercel analytics/performance components to understand use of the tools. New report, bulk-check and monitoring events use counts and categories rather than email addresses, checked URLs, report text or private keys. Site-controlled pageview events remove query strings and fragments. Provider-level settings can also affect measurement.

The Starter return flow stores a purchase-session identifier in this browser for recovery. Treat recovery links as private. Workspace authentication uses an HttpOnly, Secure session cookie. Downloaded reports and recovery files remain wherever you choose to save them.

Contact

For data questions, access/deletion requests, or to withdraw product-update consent, contact tyler@sprinterconsulting.com. Do not send card details, credentials or recovery keys.