Privacy Policy

Last updated: October 18, 2026

Let The Bots In ("we", "us", or "our") is operated by Aditya R. Singh. This policy explains what information we collect when you use letthebots.in, how we use it, and your rights.

1. What we collect

Scan requests. When you scan a URL, our servers fetch the public page and related resources to compute a report. We do not retain the fetched HTML, findings or full report. We cache only compact score metadata under a hashed key for share images and badges, as described below. We do not add scanned URLs or page payloads to application logs.

Newsletter signup. If you subscribe in the footer, we collect your email address to send occasional updates about GEO and this tool. Nothing else about your session is attached to it.

Monitoring. If you ask us to watch a site for regressions, we collect your email address and the exact URL you choose, and re-scan it daily to email you if something breaks.

We do not use cookies, analytics trackers, fingerprinting, or any third-party advertising scripts.

2. How we use your information

Newsletter emails: occasional updates, never a drip campaign. Unsubscribe any time from the link in the email.
Confirmation emails: when you sign up for the newsletter or monitoring, we send one email asking you to confirm. Nothing else is sent to that address unless you do. Unconfirmed requests are deleted after 48 hours.
Monitoring emails: only sent when a regression is detected on the specific site you asked us to watch. No digest, no marketing. If you add a Slack, Discord or webhook URL, the same alerts are posted there; we store that URL with your monitor.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

3. Third-party processors

Newsletter and monitoring emails are stored in Cloudflare Workers KV, part of our hosting infrastructure. Outbound email delivery uses Resend; see their privacy policy at resend.com/legal/privacy-policy.

Our site is hosted on Cloudflare Pages. Cloudflare may process request metadata (IP address, user-agent) in accordance with their privacy policy at cloudflare.com/privacypolicy.

4. Data retention

Newsletter and monitoring emails are retained until you unsubscribe (a link is included in every email we send) or ask us to delete them. For each monitored site we keep its daily score history (up to 90 checks) and its latest robots.txt, so alerts can show what changed; both are deleted when you stop monitoring. Automatic score-cache entries keep only the latest score and band for 30 days under a SHA-256 digest key, so share images and badges can display it without storing the scanned URL or HTML. Monitoring stores the URL you explicitly ask us to watch. Findings and page content from scans are not stored. The log analyzer, robots.txt tester, report-file comparison, selected-fix checklist and pasted HTML analysis run in your browser; your logs, imports and HTML drafts are never uploaded. Report exports are downloads you control. The agency report details you enter are kept only in your own browser.

5. Your rights

Depending on your location, you may have rights under GDPR, CCPA, or other applicable laws, including:

The right to access the personal data we hold about you.
The right to correct inaccurate data.
The right to deletion ("right to be forgotten").
The right to withdraw consent at any time (unsubscribe links are in every email).

To exercise any of these rights, email us at [email protected] and we will respond within 30 days.

6. Children

This service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16.

7. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

Questions? [email protected]