Privacy Policy

isvisible.ai is a free tool, built by Hardal, that checks whether a website is visible to AI crawlers and answer engines. You give it a domain; it reads that domain's public robots.txt and llms.txt, sends it a handful of live requests using real crawler user-agent strings, and returns a visibility score. This policy covers the landing page at isvisible.ai, the /api endpoints, and the MCP server at /api/mcp.

Domains you check. The domain or URL you submit (via the landing page, the REST API, or an MCP tool call) is sent to that domain's server so we can read its robots.txt/llms.txt and probe it with crawler user agents. We don't require an account and don't ask who owns the domain you're checking.

Email address (optional). If you choose to unlock a full PDF report, we collect the email you enter to send you that report and add you as a contact in our mailing list (Resend). We also submit that email and the scanned domain to Formspark, which we use to log leads.

Account (optional). If you sign in to track a site over time, we store your email address, the domains you choose to track, and the full result of every scan of those domains that you run while signed in. Signing in sets one cookie that keeps you signed in for up to 60 days. There is no password. We email you a single-use sign-in link instead.

Basic request metadata. Client IP address and user-agent are read from incoming requests (including MCP tool calls) to enforce rate limits and to record an aggregate pageview/event count. This is not tied to an account or profile.

Analytics. With your cookie consent, we use first-party analytics (Hardal/Virgo) to record pageviews and funnel events (e.g. a scan was started, a report was generated). See the cookie banner on the site for consent controls.

Marketing measurement (optional). With marketing-cookie consent, we use Meta Pixel and Hardal's Conversions API Gateway to measure page visits and successful lead submissions and build advertising audiences. Events include the page URL, browser information and advertising identifiers. No Meta tracking starts before you accept marketing cookies.

Scan results are cached in memory, keyed by domain, for about an hour (see CACHE_TTL_SECONDS) so repeated checks of the same domain are fast. This cache lives in process memory only — it is not written to a database and is cleared whenever the app restarts or redeploys.

Rate-limit counters (per client IP) are also in-memory only, cleared on restart, and never persisted or exported.

Account data (your email, tracked domains and saved scans) is stored in our database so the dashboard can show how a score changed between scans. We use it for that and for sending your sign-in links. Signing in does not add you to our mailing list.

Email/contact data you submit to unlock a report is stored in our Resend audience and Formspark form log until you ask us to remove it or unsubscribe. We use it only to send the report you requested and, if you've opted in, occasional follow-up about the product.

We use a small number of processors to run the service. We don't sell data to anyone.

• Resend — sends the emailed PDF report and sign-in links, and stores the mailing-list contact if you unlock a report.
• Formspark — stores the lead-capture form submission (email + scanned domain).
• Hardal (Virgo) — first-party analytics, only after cookie consent.
• Meta — advertising measurement and remarketing through Meta Pixel and Hardal's Conversions API Gateway, only with marketing-cookie consent.
• The domain you ask us to check — we send it standard HTTP requests (fetching robots.txt/llms.txt, its sitemap, its homepage and a handful of its public pages) using declared crawler user agents. We don't send it anything you typed beyond the domain name itself.

In-memory scan-result cache and rate-limit counters are bounded by a short TTL and are gone on the next deploy — we don't keep a historical log of domains checked without an account.

Account data is kept until you remove it. Removing a tracked site deletes its saved scans. Deleting your account, from the bottom of the dashboard, deletes your email, your tracked sites and every saved scan at once. Sign-in links expire after 15 minutes.

Email/contact records persist in Resend/Formspark until you unsubscribe or contact us to have them removed.

You can use the domain-check tool (web, API, or MCP) without providing an email at all — the email step is only required to unlock the downloadable PDF or to keep a history of your scans.

To unsubscribe from emails, use the unsubscribe link in any email we send, or contact us at the address below to have your contact record and form submission deleted.

isvisible.ai is a developer/marketing tool and is not directed to, or knowingly used by, children under 13.

If we change what data we collect or how we use it, we'll update this page and change the “last updated” date above.

isvisible.ai is a product by Hardal. For privacy questions, deletion requests, or anything else, email [email protected].