Privacy Policy

Version 2026-10-21. Effective October 21, 2026.

This policy describes what isitslop.org and api.isitslop.org (the Service), operated by API Blaze, LLC, collect and why. The short version: almost nothing, and most of it is public by design.

1. What we collect

• URLs you add. The URL, the derived domain, and the page title we fetch. These are public: that is the point of an index.
• Verification data. A random token, the method chosen, and for email verification the administrative address the code was sent to (for example admin@yourdomain). We store a hash of the code, never the code. Verification records expire after 24 hours.
• Owner keys. We store only a SHA-256 hash of your owner key. We cannot recover it. The website also stores the key in your browser's local storage so you do not have to paste it; clearing site data removes it.
• Grades and appeals. The scores, the rule breakdown, the text you fetch from your own URL at grading time, any usage numbers you submit, and any appeal text. All of this is public.
• IP addresses. Used transiently for rate limiting, keyed by a per-feature bucket in a table that is overwritten as windows expire. Not joined to entries, grades, or appeals.
• Terms acceptance. The terms version and timestamp of your acceptance, attached to your entry.

2. What we do not collect

No accounts, no passwords, no cookies set by us, no analytics scripts on the website, no advertising, no sale of data, no sharing of data with third parties beyond the processors below.

3. Processors

• Vercel hosts the website.
• Cloudflare runs the API and resolves DNS lookups for verification.
• Neon hosts the database.
• Amazon Web Services (SES) sends verification emails, if you choose email verification.

Each may keep its own operational logs (including IP addresses) under its own policy.

4. Fetching your page

At grading time our bot fetches your URL once, identified by the user agent isitslop-bot. We keep the extracted text used for the score as part of the public grade breakdown. We do not crawl beyond the URL you gave us.

5. Retention

Entries, grades and appeals are kept indefinitely because they are the index. Verification records expire after 24 hours. Rate limit buckets are overwritten continuously. A verified owner can request removal of their entry; see the Terms, section 9.

6. Your rights

If you are in a jurisdiction that grants you rights over personal data (such as the EU, UK, or California), you may exercise them by filing a public appeal from your entry page or opening an issue on GitHub. Because we hold almost no personal data, the usual answer is "it is already public, and we can delete your entry".

7. Children

The Service is not directed at children under 13 and we do not knowingly collect data from them.

8. Changes

We may update this policy. The version in force is shown at the top of this page.

9. Contact

API Blaze, LLC. github.com/jayjaychicago/isitslop.