Privacy Policy

Telemetry Design UX Tool is built to analyze websites—not people.

This Privacy Policy explains what information we collect, why we collect it, how it is used, and the choices you have regarding your information when you use Telemetry Design UX Tool, our website, applications, and related services (collectively, the “Services”).

Our approach is simple:

• We do not sell your personal information.
• We do not rent your personal information.
• We do not use private account or project information to advertise to you.
• We do not build advertising profiles from your activity.
• We do not routinely review the content of your private projects or assessments.
• We collect only the information reasonably necessary to operate, improve, secure, and understand use of the Services.

1. Information We Collect

The information we collect depends on how you use the Services.

Information you provide directly

You may be able to use certain public tools without creating an account.

If you create an account, purchase a service, contact us, or use logged-in features, you may provide information such as:

• your email address;
• your name, if you choose to provide it;
• account authentication information;
• project names;
• website URLs submitted for analysis;
• colors, notes, settings, findings, or other information you enter into a project;
• communications you send to us; and
• information necessary to administer a purchase or subscription.

We collect this information only when necessary to provide the functionality you have requested.

Website and project data

The Services may analyze publicly accessible websites or information you provide to the Services.

Depending on the tool, this may include information such as:

• URLs;
• page titles;
• website structure and hierarchy;
• page content or metadata;
• accessibility findings;
• color values;
• design or user-experience findings;
• crawl results;
• technical page information; and
• manually entered assessment information.

This information is processed to provide the analysis, report, tool, or project functionality you requested.

We do not use the contents of your private projects to create advertising profiles about you.

2. Account Information

If you create an account, we use your account information to authenticate you, provide access to your projects, maintain your settings, and operate the Services.

Private account and project information is not used for advertising, sold to data brokers, or used to create marketing profiles.

The Services are designed so that we do not routinely inspect individual users' private projects or account activity.

There may be limited circumstances in which authorized access to account or project information is necessary, such as:

• responding to a support request you initiate;
• investigating a security incident;
• diagnosing a technical problem;
• preventing fraud, abuse, or misuse of the Services;
• complying with a valid legal requirement; or
• maintaining the reliability and security of the Services.

Any such access should be limited to what is reasonably necessary for the applicable purpose.

3. Analytics and Usage Information

We may use privacy-conscious analytics services to understand how the Services are being used.

For example, we may collect information such as:

• pages or tools visited;
• approximate geographic region;
• device and browser type;
• operating system;
• referring website;
• screen size;
• general navigation patterns;
• feature usage;
• session duration;
• errors or performance information; and
• aggregated interaction patterns.

We use this information to answer questions such as:

• Which tools are useful?
• Are visitors having trouble completing a task?
• Is a page loading correctly?
• Which features should we improve?
• How many people are using a particular part of the Services?

We are interested in product usage patterns, not in identifying individual visitors.

Where supported by our analytics providers, we configure analytics to minimize collection of personally identifiable information and do not intentionally send information such as names, email addresses, account contents, or private project content to analytics platforms.

Analytics data may nevertheless include cookies, device identifiers, session identifiers, approximate location, or similar technical information that may be considered personal data under certain privacy laws.

4. Google Analytics

We may use Google Analytics 4 (“GA4”) to understand general use of the Services.

Google Analytics may use cookies or similar technologies to measure interactions with our website.

We configure Google Analytics with the goal of collecting aggregate product and website usage information rather than identifying individual visitors.

We do not intentionally send names, email addresses, private project information, assessment responses, or other directly identifying information to Google Analytics.

Google Analytics may derive general geographic information and other technical information from a visitor's connection and device.

Where legally required, analytics cookies will be subject to your consent choices.

Unless explicitly stated otherwise, we do not use Google Analytics data for remarketing or personalized advertising.

5. Heatmaps and Session Analytics

We may use heatmap, interaction analytics, or session-analysis tools to understand how people interact with pages and interfaces.

These tools may help us identify general usability issues such as:

• areas that receive little interaction;
• confusing navigation;
• repeated clicks;
• scrolling behavior;
• interface elements people have difficulty using; or
• common paths through a page.

When these tools are used, we intend to configure them to minimize collection of personally identifiable information.

Sensitive form fields, passwords, authentication information, and private account or project content should be excluded, masked, or otherwise prevented from being captured where supported by the provider.

We do not use heatmap or session-analysis technology for surveillance, employee monitoring, advertising profiling, or determining the identity of individual visitors.

Examples of services we may use include PostHog. This list should be updated if the services we use change.

6. Cookies and Similar Technologies

We may use cookies, local storage, or similar technologies.

Some of these technologies are necessary for the Services to function. For example, they may be used to:

• keep you logged in;
• maintain security;
• remember preferences;
• preserve application state; or
• prevent abuse.

Other cookies may be used for analytics.

Where required by applicable law, non-essential analytics or similar tracking technologies will not be activated until you provide consent.

You may be able to control cookies through our cookie settings or through your browser settings.

Disabling certain necessary technologies may prevent some features of the Services from functioning correctly.

7. What We Do Not Do With Your Information

We do not:

• sell personal information;
• rent personal information;
• operate as a data broker;
• sell private project data;
• use private project content to target advertising to you;
• provide advertisers with access to your private account information;
• intentionally collect sensitive personal information through analytics;
• intentionally send passwords or authentication credentials to analytics providers; or
• attempt to identify individual visitors from aggregated analytics data.

If our practices materially change, we will update this Privacy Policy.

8. Service Providers

We rely on third-party infrastructure and service providers to operate the Services.

These providers may process limited information on our behalf as necessary to provide their services.

Depending on the features you use, these may include:

Payment information such as full credit-card numbers is generally processed directly by the payment provider rather than stored by us.

These companies maintain their own privacy practices and may process information according to their respective privacy policies and agreements with us.

We select service providers based in part on their ability to provide appropriate security and data-protection safeguards.

9. How We Use Information

We use information collected through the Services only for legitimate purposes related to operating the product, including to:

• provide requested tools and functionality;
• create and maintain accounts;
• authenticate users;
• store and retrieve projects;
• perform website analysis or crawling;
• generate assessments and reports;
• process purchases or subscriptions;
• provide customer support;
• maintain and improve the Services;
• understand aggregate usage patterns;
• diagnose bugs and performance issues;
• protect the security and integrity of the Services;
• prevent misuse, fraud, or unauthorized activity;
• comply with applicable law; and
• communicate important information about the Services.

We do not use private project information for unrelated advertising purposes.

10. Legal Bases for Processing — European Economic Area, United Kingdom, and Similar Jurisdictions

If the General Data Protection Regulation (“GDPR”), UK GDPR, or a similar law applies to you, we process personal data only when we have an appropriate legal basis.

Depending on the circumstances, those bases may include:

Performance of a contract

We process information when necessary to provide the Services you requested, such as creating an account, saving a project, performing an analysis, or providing a paid service.

Legitimate interests

We may process limited information when reasonably necessary for our legitimate interests, such as:

• maintaining and improving the Services;
• understanding aggregate usage;
• preventing fraud and abuse;
• maintaining security; and
• diagnosing technical problems.

When relying on legitimate interests, we consider whether those interests are outweighed by your privacy rights.

Consent

Where required, we rely on your consent before using non-essential analytics cookies or similar tracking technologies.

You may withdraw consent at any time through the available privacy or cookie controls.

Legal obligations

We may process information when necessary to comply with applicable legal obligations.

11. GDPR and Privacy Rights

Depending on where you live, you may have rights concerning your personal data.

These may include the right to:

• request access to personal data we hold about you;
• request correction of inaccurate information;
• request deletion of your personal data;
• request restriction of certain processing;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable data-protection authority.

These rights are subject to applicable legal limitations and exceptions.

To exercise a privacy right, contact us at info@telemetrydesign.com.

We may need to verify your identity before completing certain requests.

We will not discriminate against you for exercising applicable privacy rights.

12. Automated Decision-Making

We do not use personal information to make automated decisions about individuals that produce legal or similarly significant effects.

Automated UX, accessibility, website, or content assessments evaluate websites or digital products. They are not intended to evaluate an individual person.

13. International Data Transfers

Our service providers may process information in the United States or other countries outside the country where you live.

Where required by applicable data-protection law, we or our service providers use appropriate mechanisms for international transfers of personal data, which may include standard contractual clauses, adequacy decisions, or other legally recognized safeguards.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information.

For example:

• account information may be retained while your account remains active;
• project information may be retained while your project or account remains active;
• billing and transaction records may be retained as required for accounting, tax, or legal purposes;
• technical logs may be retained temporarily for security and troubleshooting; and
• analytics data may be retained according to the retention settings of the applicable analytics service.

When information is no longer reasonably needed, we may delete, aggregate, or de-identify it.

Backup systems may retain deleted information for a limited period before it is permanently overwritten.

15. Deleting Your Account or Data

If account functionality is available, you may request deletion of your account and associated personal information by contacting info@telemetrydesign.com or by using any account-deletion controls available within the Services.

Some information may be retained where necessary to:

• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• maintain financial records;
• prevent fraud or abuse; or
• maintain limited security logs.

Where information has been aggregated or irreversibly de-identified so that it can no longer reasonably identify an individual, we may retain that information.

16. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include features such as:

• encrypted network connections;
• access controls;
• managed authentication;
• secure hosting infrastructure;
• restricted administrative access; and
• security features provided by our infrastructure vendors.

No online service can guarantee absolute security, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed despite these safeguards.

17. Website Crawling

If you submit a website URL for crawling or analysis, our systems may request publicly accessible pages from that website in order to provide the requested service.

Crawl data may include publicly accessible URLs, titles, metadata, content structure, links, and other information required to perform the analysis.

Website crawl information is used to provide the requested analysis and related product functionality.

Submitting a publicly accessible website for analysis does not cause us to claim ownership of that website or its content.

18. Children's Privacy

The Services are intended for professional and general adult use and are not directed to children under 13.

We do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information through the Services, contact us at info@telemetrydesign.com so that we can review the situation and take appropriate action.

19. Do Not Sell or Share My Personal Information

We do not sell personal information for money.

We also do not use or disclose personal information for cross-context behavioral advertising as those terms are generally defined under U.S. state privacy laws, unless this Privacy Policy is updated to clearly disclose such a practice.

If our business practices change in a way that creates a legal right to opt out of the sale or sharing of personal information, we will provide the required opt-out mechanism.

20. Do Not Track and Global Privacy Controls

Browser-based “Do Not Track” signals are not implemented consistently across the industry.

Where technically supported and legally required, we may recognize applicable browser-based privacy preference mechanisms, such as Global Privacy Control (“GPC”), for processing activities to which those signals legally apply.

21. Emails

If you provide an email address for an account, transaction, support request, or other service-related purpose, we may send you messages necessary to provide the Services.

These may include:

• authentication messages;
• password resets;
• billing notices;
• security notices;
• account notifications; or
• important product or policy updates.

If we offer optional marketing email, those communications will be handled separately and will include an appropriate way to unsubscribe.

Opting out of marketing messages does not prevent us from sending necessary transactional or service-related communications.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as the Services, technology, or legal requirements change.

When we make changes, we will update the “Last updated” date at the top of this page.

If a change materially affects how we use personal information, we may provide additional notice where appropriate.

23. Contact Us

Questions, privacy requests, or concerns about this Privacy Policy may be sent to: