Privacy policy

Shipwork is operated by Genoun Digital Solutions Ltd. This page lists everything the service keeps, why, and for how long.

Free checks

• The Chrome extension reads the active page's visible markup only when you open it. Its two-signal page preview stays in your browser; it does not send the page contents to Shipwork.
• When you choose a site audit, the extension sends the current public URL to Shipwork. The site audit fetches public pages and saves its report for 7 days so you can reopen or unlock it without running the check again. An unlocked report is kept for up to 365 days.
• The extension stores the audit URL, status and a limited result preview in Chrome's local extension storage. The popup displays that result for up to 24 hours; the stored record remains until another audit replaces it or the extension is removed. It does not store the locked findings there.
• No account is needed for the first monthly site audit. Signing in or buying credits or a plan changes the available allowance.

Accounts (Google sign-in)

• Signing in with Google gives us your email address and Google account ID, and nothing else: we request only the basic openid email scope.
• We keep them on your account record so your plan, credits, watches and connections follow you. A first-party session cookie keeps you signed in.

Search Console and Merchant Center connections

• Connecting Search Console grants read-only access (Google's webmasters.readonly scope). Shipwork cannot change anything in your property.
• The access token Google issues is stored on our own server, tied to your account, and never sent to your browser. It is used only when you run a check that reads your search data.
• Merchant Center uses Google's content scope, the only one Google offers for it, which technically allows edits. Shipwork only reads product status and never writes.
• Disconnect a property at any time on the Connect Search Console page, which deletes its stored token, or remove Shipwork from your Google account's permissions.

What we keep when you use a paid feature

• A watch keeps the site address, its daily scan history and the email address alerts go to, for as long as the watch runs.
• Saved audit reports are kept for 7 days unless unlocked; unlocked reports are kept for up to 365 days. Other report types can have different retention periods shown when you create them.
• Search Console baselines (for example Striking Distance) keep the previous run's figures on your account so the next run can show what moved.
• Public score pages keep the score snapshot for 180 days.

Email

• If you ask for a report by email, we keep the address, the site and the tool it came from so we can send it.
• Alert and account emails are sent through Cloudflare Email, with Resend as a fallback. Every alert has an unsubscribe link.

Payments

Payments are handled by Stripe. Card details never reach Shipwork; we keep the email, the Stripe customer and subscription IDs, and what you bought.

Cookies and counting

• Session cookie: keeps you signed in, first-party, only when you sign in.
• Device cookie (sw_did): a random ID used only to apply the free monthly limit fairly. It is not linked to your identity and not shared.
• Anonymous counters record which tool was used and whether it completed, as aggregate counts kept for 120 days.
• Cloudflare Web Analytics measures page views without cookies. Google Analytics measures visits and page activity on public pages and may use analytics cookies. We send page paths without query strings, and do not enable Google advertising signals or ad personalization in the site tag. We never sell personal data.

Who processes data for us

Cloudflare (hosting, database, email and analytics), our own API server (checks and Search Console connections), Stripe (payments), Google (sign-in, Search Console, Merchant Center and site analytics) and Resend (fallback email).

Deleting your data

Email hello@shipwork.io from the address on your account, or with a watch or report link, and we will delete the record and any connection tokens.