Privacy

The short version: no accounts, no cookies, no analytics, no third-party scripts. We do keep a record of which sites were scanned and anything you choose to type into the optional contact form — details below.

What we keep about a scan

When you scan a site we record the address, the date and time, and the number of findings by severity. We keep that. It is how we measure the sector, and how we know which entities might want help.

That record contains no personal data — a government website address is public information, not information about a person. We do not record who submitted it.

What we keep if you fill in the form

The contact form after a report is entirely optional. Your report is complete and downloadable whether or not you use it.

If you do use it, we keep what you typed: entity name and type, population served, your name, email, phone, and your description of what you need. We use it to reply to you. We do not sell it, and we do not add you to a mailing list.

Whether we might contact you

Being straight about this, because it is the question that matters. If you leave your details, we will reply.

If you scan a site and leave nothing, we may still reach out to the entity — using contact details published on its own website or in public records, the same way any supplier might. We will not have your name or your email, because you did not give them to us. If you would rather we did not, email hello@muniaudit.com with the domain and we will add it to a do-not-contact list.

What we still do not do

• No accounts and no sign-up. Scanning requires nothing from you.
• No analytics, no tracking pixels, no advertising, and no third-party scripts. These pages load no JavaScript at all.
• No cookies on any public page, so there is no consent banner to dismiss. The internal admin console sets a single sign-in cookie, but you will never see it — it is not part of the site you are using.
• No copies of your website's content. Pages are fetched, evaluated in memory, and discarded.
• Your IP address is used only for rate limiting, in a short in-memory window. It is never written to disk and never linked to a report or a lead.

Retention

The readable report is held in memory for one hour, then deleted; its URL carries a random identifier and is not indexed. The scan record (address, date, finding counts) and any contact details you submitted are kept until you ask us to delete them.

To have your details removed, email hello@muniaudit.com. We will delete them and confirm.

Sub-processors

The optional visual-review pass sends a screenshot of the scanned page and an extract of its text to Google's Gemini API for evaluation. Only content from the public page being scanned is sent — never your IP address or anything identifying you. If that is not acceptable for your entity, the rule-checking layer runs entirely on our own infrastructure and produces a complete report without it.

Changes

Material changes to this page will be noted here with a date. Questions: hello@muniaudit.com.