A free aeogeo scan runs 26 deterministic checks in under 10 seconds on any public URL (ruleset v20).

aeogeo.site collects email on the contact-page waitlist — this page explains what we store, why, and your choices before we turn on paid subscriptions.

What does aeogeo.site do with my email?

When you submit the waitlist form on the contact page, we store your email address in our waitlist database so we can notify you about launch, early access, and material product changes. We do not use the waitlist to run LLM inference on your content, and we do not sell or rent email lists to third parties.

What we collect

• Email address — required to join the waitlist
• Submission metadata — such as timestamp and anti-abuse signals handled by our API (rate limits, basic validation)
• Cookie and consent choices — stored in the aeo_cookie_consent cookie when you use the banner

We do not ask for postal address or phone number on the waitlist form. Paid accounts may collect billing details through our payment provider when checkout launches; that flow will be covered in an updated policy before billing goes live.

How we use waitlist email

We use your address to send product updates related to aeogeo.site: launch timing, MCP and API availability, and instructions to claim an early key if you are invited. Message frequency is low (major milestones, not daily marketing). You may opt out of non-essential mail once transactional email is enabled by using the unsubscribe link in those messages or by asking for removal through our public contact channel when it is published.

Cookies

We use an essential cookie to remember your cookie choices and keep that choice working across pages. Optional analytics is off until you allow it in the banner, or until you visit from a country that does not require a prompt. We do not use marketing cookies on this site today.

• Essential — aeo_cookie_consent stores your category choices for about six months
• Analytics — cookieless PostHog page views only after you allow analytics (or outside the EU/EEA/UK/CH prompt region)
• Marketing — not used today, even if you turn the category on

The banner is shown in the EU, EEA, UK, and Switzerland, and when we cannot tell the country. Change your mind any time with Cookie settings in the footer, or open any page with ?cookie_banner=preview.

Analytics

We use PostHog (EU cloud, eu.i.posthog.com) for product and web analytics on aeogeo.site. The marketing snippet stays in cookieless mode: no analytics cookies or local storage are set in your browser for that snippet. It loads only when analytics is allowed (banner opt-in, or a country that does not require the prompt). PostHog may then receive page-view events needed to understand how visitors use the site.

When you join the waitlist for the first time, our API worker records a waitlist_joined conversion event in PostHog using your email as the distinct identifier, because you opted in by submitting the form. Resubmitting an address that is already on the list does not send another conversion event.

Once paid API keys are live, our servers also record the following product-metrics events in PostHog for keyed use. These identify you only by an internally generated key id — never your email — and carry only counts, plan, and source:

• key_provisioned — a new API key was provisioned (properties: plan, source)
• mcp_connected — a keyed agent connected to the MCP endpoint for the first time
• first_finding — the first check failure a key discovers, recorded once (properties: seconds since provisioning, tool)
• key_week_usage — weekly usage per key, emitted once a week (properties: calls, distinct tools)

None of these events include URLs you scan, page content, findings, or share-link report content — we log domain-level and count metrics only.

Where data is stored

Waitlist rows live in our application database (Cloudflare D1) behind the aeogeo.site API worker. Analytics events are processed by PostHog in the EU. Email delivery for waitlist and account messages may use a transactional email provider; we share only what is needed to deliver mail you requested.

Retention and deletion

Cookie consent records last about six months, unless you clear them sooner. We keep waitlist email until you ask us to delete it, until you unsubscribe from launch mail and request removal, or until we convert your waitlist entry into a customer account (at which point account terms apply). To request deletion before a public inbox is listed on /contact, use the waitlist reply channel once messages begin, or check back here for an updated contact address.

Changes

We will update this page when billing, analytics, or support tooling changes what we collect. Material changes will be noted in the on-site changelog and, where appropriate, emailed to waitlist subscribers.

Last updated: 2026-10-12. Questions about this policy: see contact for current reachability options.