Privacy

What a scan sends where — siteTR Test privacy notes.

siteTR Test is a free tool by SiteTR. It works without an account.

What a scan sends where

When you analyze a domain, we send the domain name to: public DNS-over-HTTPS resolvers (Google, Cloudflare), the domain’s registry RDAP service, the target website itself (homepage, robots.txt, sitemaps, llms.txt), Google PageSpeed Insights, Have I Been Pwned, crt.sh / CertSpotter, the Green Web Foundation, websitecarbon.com, archive.org, tranco-list.eu, and DNS blocklists (Spamhaus, Barracuda, SpamCop). The DA/PA checker sends the looked-up domain to the Moz Links API. Our own Go probe (when enabled) connects to the target for TLS measurements. Nothing else about you is sent anywhere.

What we store

• Analysis results and daily snapshots for scanned domains (the archive feature — public by nature).
• A salted, truncated hash of your IP address — solely for rate limiting. The raw IP is never stored.
• Aggregate counters (analyses per day, cache hits). No per-request logs with domains or addresses are retained.
• If you use the watch feature: the email and domain you gave us, stored only to send that domain’s change notifications.

What we do not do

No accounts, no tracking pixels, no third-party analytics, no selling of data. The badge endpoint works without cookies.