Privacy & cookies
Last updated 2 August 2026
LaunchCheck is run from the Netherlands and follows the GDPR. This page is short because the service collects very little — everything below is a description of what the code actually does, not a template.
There is no cookie banner because there are no cookies. LaunchCheck sets none, uses no analytics, no tracking pixels, no advertising, and no browser storage of any kind. Nothing about you is shared with a third party for marketing.
When you scan a URL
The URL you submit is fetched and analysed, and the report is sent back to your browser. The result is held in memory for about a minute so a repeated scan of the same address does not hit the site twice, then discarded. Page content is never written to disk and never retained.
Your IP address is held in memory for up to a minute purely to enforce a rate limit, and is never stored, logged to a file, or associated with the URLs you scan.
When you ask to be notified
If you enter an email address to register interest in monitoring, that is the only thing kept:
| What | Why |
|---|---|
| Your email address | To contact you if monitoring is built |
| The URL you had scanned | To know which kind of site the interest came from |
| That page's score | Same reason |
| The date | To know when interest was expressed |
The lawful basis is your consent, given by submitting the form. It is stored in a Postgres database hosted by Supabase, protected by a row-level security policy that allows the application to add records but not to read them back. It is not shared with anyone, not sold, and not used for anything other than contacting you about this one thing.
Retention: until you ask for removal, or until the monitoring idea is abandoned — whichever comes first. If it is abandoned, the list is deleted.
Cookies set by others
LaunchCheck sets no cookies. The infrastructure in front of it may:
-
Cloudflare may set
__cf_bm, a short-lived bot-management cookie. It is classed as strictly necessary and is not used to profile you. - Render hosts the application and processes requests in order to serve them.
You can confirm all of this yourself, which is more convincing than us saying so:
curl -sI https://getlaunchcheck.com/ | grep -i set-cookie
Who processes data on our behalf
- Render — application hosting (United States / EU regions)
- Supabase — database for the email list
- Cloudflare — DNS and network layer
- UptimeRobot — availability checks against a status endpoint; sees no visitor data
Your rights
Under the GDPR you may request access to, correction of, or deletion of your personal data, withdraw consent at any time, and lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.
Since the only personal data held is an email address you volunteered, deletion is straightforward: email hello@getlaunchcheck.com and it will be removed.
Scanning sites you do not own
LaunchCheck fetches publicly available pages, identifies itself honestly as
LaunchCheckBot, and stores nothing from them. Site owners can
block it — see the bot page. Please do not use it to
hammer a site you have no relationship with; there is a rate limit, and it
is enforced.
Changes
If this policy changes materially and you are on the email list, you will be told before the change takes effect. The date at the top always reflects the current version.