What this page covers
This page explains what Website Health Report collects when you scan a website, why, and how to delete it. OLDEV, the WordPress practice of Lotfi Otmanine, runs this service. Contact: lotfi@oldev.site.
What is collected
- The website address you enter and the results of the checks.
- Your confirmation that you own the site or may test it, with the time you gave it.
- A keyed hash of your IP address, used for rate limits and abuse prevention. The IP address itself is not stored.
- Your email address, only if you enter one, with the consents you chose.
Why it is used
- To run the scan and show your report.
- To email the PDF report, only if you ask for it.
- To let you sign in to your dashboard with a one-time link.
- To send occasional messages about website health, only if you tick that box.
- To stop abuse of the service.
Services involved
- Cloudflare Turnstile checks that the request comes from a person.
- Google PageSpeed Insights measures performance for the scanned address.
- Public DNS-over-HTTPS resolvers answer the SPF, DKIM and DMARC lookups.
- Brevo delivers email.
- Anthropic writes the summary when the AI summary is enabled. It receives scores and check results for the scanned domain, not your email address.
How long it is kept
Reports, findings and the abuse log are deleted after 30 days by an automated job. An email address with no remaining reports is deleted at the same time, including its contact record.
How to delete your data
Every report has a button that deletes that report at once. If you left an email address, sign in on the Dashboard page and choose Delete my data to erase your reports, your address and your contact record. You can also email lotfi@oldev.site.
What the scan does not do
Scans are passive. They read the public home page, robots.txt, the sitemap, the certificate and public DNS records. They do not scan ports, test passwords or attempt to exploit anything.