Privacy Policy
Effective date: April 23, 2026
Your privacy matters to us. This policy explains what information we collect, why we collect it, how we use it, and what choices you have. We have written it to be as clear and specific as possible rather than burying important details in vague legal language.
Who This Policy Applies To
This policy applies to anyone who visits lighthouse-aimetrics.com, creates an account, uses our service, or interacts with our public Lighthouse audit tool.
What We Collect and Why
Account Information
When you create an account, we collect your email address and, if you choose to set one, your name or organization name. We use this to authenticate you, send you notifications about your monitors and alerts, and communicate important updates about the service.
Monitor and Audit Configuration
We store the URLs you add to your monitors, any custom request headers you configure, your preferred testing regions, device settings, and alert thresholds. This data is the core of what makes the service work, we cannot run audits on your behalf without it.
Performance Data
Every time a Lighthouse audit runs for your monitors, we store the resulting scores (Performance, Accessibility, Best Practices, SEO) along with Core Web Vitals metrics such as LCP, FCP, TBT, CLS, TTFB, and Speed Index. We also store the full Lighthouse report generated for that run. This data is retained according to the history limits of your plan and is used to render your dashboards, trend graphs, and alert histories.
Billing Information
If you subscribe to a paid plan, payment collection is handled by our payment processor. We never see or store your full card number. We do retain your subscription status and billing history internally so we can manage your account accurately.
Usage and Technical Data
We collect standard server log data including IP addresses, browser type, page visits, and API request timestamps. We use this primarily for debugging, rate limiting, abuse prevention, and understanding how the product is being used at an aggregate level. We do not sell this data or use it to build advertising profiles.
Public Check Submissions
When you use our public Lighthouse checker without an account, we store your IP address, the URL you submitted, and the resulting audit data. IP addresses are used solely for rate limiting and abuse prevention. Public check results may be retained temporarily for performance and caching purposes.
Cookies and Local Storage
We use session cookies to keep you logged in. We do not use third party advertising cookies or tracking pixels. If we add any analytics tool in the future, we will update this policy before doing so.
How We Use Your Information
We use the information we collect to operate and improve Lighthouse AI Metrics, to send you alerts and notifications you have configured, to respond to your support requests, to prevent abuse of our infrastructure, to process your subscription and billing, and to comply with legal obligations.
We do not use your data to serve you targeted advertisements. We do not sell your personal data to third parties. We do not share your data with third parties except in the limited circumstances described below.
When We Share Your Data
Service Providers
We work with a limited number of trusted third party providers to operate our platform, covering areas such as data storage, payment processing, email delivery, compute infrastructure, and AI analysis. Each provider receives only the data necessary to perform their specific function and is contractually required to handle it with appropriate safeguards. We do not authorize any provider to use your data for their own purposes.
Legal Requirements
We may disclose your data if we are required to do so by law, subpoena, court order, or other governmental authority, or if we believe in good faith that disclosure is necessary to protect our legal rights, enforce our terms, or respond to claims of illegal activity.
Business Transfers
If Lighthouse AI Metrics is acquired by or merged with another company, your data may be transferred as part of that transaction. We will notify you via email and through a notice on our website if that happens, and we will describe your options at that time.
Data Retention
We retain your account data and performance history for as long as your account is active and for a reasonable period afterward in case you return. When you permanently delete your account, we will remove your personal information within 30 days, except where we are required by law to retain it longer. Aggregated and anonymized data derived from your usage may be retained indefinitely for product improvement purposes.
Your Rights
Depending on where you are located, you may have the right to access the personal data we hold about you, request a correction if it is inaccurate, request deletion of your data, object to certain types of processing, or request a portable copy of your data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are located in the European Economic Area, you have rights under the GDPR. If you are a California resident, you have rights under the California Consumer Privacy Act. We honor these rights regardless of where you are located.
Security
We take reasonable and industry standard measures to protect your data, including encrypted connections (HTTPS), access controls on our database and storage infrastructure, and limited employee access to production systems.
Children
Our service is intended for adults only. We do not knowingly collect personal data from anyone under the age of 16, and we will delete any such data promptly upon becoming aware of it.
Changes to This Policy
We may update this privacy policy as our service evolves. When we make material changes, we will update the effective date and notify you by email. For minor clarifications, we will update the policy without separate notice.
Contact
For privacy-related questions or requests, email us at [email protected].