Legal

Privacy Policy

Last updated: January 15, 2026

This Privacy Policy explains how WhatBuilt (“WhatBuilt”, “we”, “us”) handles information when you use our website and related services (the “Service”). We try to keep this short and honest: WhatBuilt is designed to collect as little as possible.

1. The short version

  • No accounts. We do not ask you to sign up or log in.
  • The URLs you check are processed in the moment and are not saved to a database tied to you.
  • We use privacy-friendly aggregate analytics to understand overall usage and keep the Service reliable.
  • We do not sell your personal information.

2. Information we process

We process only what we need to run the Service:

  • URLs you submit. When you ask WhatBuilt to analyze a site, we send a request to that URL and inspect its public response (HTML, headers, scripts, and similar signals). The URL is used to perform the check and is not stored in a persistent database tied to your identity.
  • Technical request data. Like most websites, our hosting and infrastructure providers automatically receive information needed to deliver the Service, such as IP address, user agent, referrer, timestamp, and request path. This is used for security, rate limiting, debugging, and short-term operational logs.
  • Aggregate analytics. We use Vercel Analytics to measure page views and overall traffic patterns in an aggregated, privacy-friendly way. It does not use cookies to track you across sites.
  • Messages you send us. If you email us, we receive the content of your message and your email address so we can respond.

We do not intentionally collect sensitive personal data, and we do not ask you for any personal information to use the Service.

3. How we use information

We use the information above to:

  • Run the Service and return results for the URLs you check.
  • Keep the Service secure, detect abuse, and prevent misuse such as excessive automated requests.
  • Monitor performance, diagnose errors, and improve reliability.
  • Understand in aggregate how the Service is used so we can make it better.
  • Respond to your questions, feedback, or support requests.

4. What we do not do

  • We do not sell or rent personal data.
  • We do not build advertising or marketing profiles about you.
  • We do not store a per-user history of the URLs you have checked.
  • We do not use third-party advertising cookies or cross-site trackers.

5. Sharing and service providers

We rely on a small number of service providers to run WhatBuilt. These providers may process limited data strictly on our behalf and under their own privacy terms, including:

  • Hosting and analytics providers (for example, Vercel) used to serve the Service and measure aggregate usage.
  • Upstream services we call to fetch the public response of a URL you submit, so we can analyze it.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of WhatBuilt, our users, or others.

6. Cookies

WhatBuilt does not use cookies for advertising or cross-site tracking. We may use strictly necessary storage (such as a small amount of local storage or a session cookie) to make the Service work, and our analytics provider may use privacy-preserving measurement that does not rely on third-party advertising cookies.

7. Data retention

We retain operational logs (such as IP address, user agent, and request metadata) only for as long as needed for security, debugging, and abuse prevention, then they are rotated or deleted in the normal course of operations. URLs you submit are used to run the check and are not kept in a user-linked history.

8. Security

We take reasonable technical and organizational measures to protect the information we process. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.

9. Children

WhatBuilt is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or object to certain processing of your personal information. Because WhatBuilt does not maintain user accounts or per-user histories, most requests will relate to operational logs or email correspondence. To make a request, email us at the address below and we will respond as required by applicable law.

11. International users

The Service may be operated from and hosted in jurisdictions different from where you live. By using the Service, you understand that your information may be processed in those jurisdictions, which may have data protection rules different from your own.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. If the changes are significant, we will take reasonable steps to make them clear on the site.

13. Contact

Questions or privacy requests? Reach us at support@whatbuilt.com.