Audit tool terms

This is the one obligation that matters most, so it is first: only submit a website you own, operate, or are otherwise authorised to test.

Scanning a website you have no relationship with may breach that site’s own terms of use, and in some circumstances may be an offence. By submitting an address you confirm you have the right to have it scanned, and you accept responsibility for that decision. You agree to indemnify us against any claim brought by a site owner arising from a scan you asked for.

You also agree not to submit anything that is not an ordinary public website — no internal hostnames, private IP ranges, staging environments you do not control, or addresses whose purpose is to make our crawler attack something on your behalf. The tool refuses most of these outright.

Please read this section before scanning anything sensitive.

• Completed reports are saved so you can come back to them, share them with a colleague, and attach them to an enquiry.
• A report has its own URL, and anyone who has that URL can open it without signing in. The identifier is long and not guessable, but it is not a password — treat the link as you would any unlisted link, and only send it to people you are happy to have read the report.
• A fresh report for a given domain is re-used for 24 hours. If someone else scans the same domain within that window, they are shown the report we already produced rather than a new scan. Reports contain only what that website already publishes publicly, but you should know that the result is not private to you.
• Reports are kept for up to 12 months and then deleted. You can ask us to delete one sooner — see below.

A report is an automated opinion, produced in about a minute, by a machine that has read a handful of your pages. It is a good starting point for a conversation. It is not an audit in the professional sense, and it is not advice.

• The written analysis is AI-generated and can be wrong. It can miss real problems and it can describe problems that are not there. Verify anything before acting on it.
• The scores come from third-party tools — chiefly Google Lighthouse — and reflect one measurement, on one connection, at one moment. They move between runs.
• The compliance checks are pattern matching, not a legal review. The tool looks for the presence of a privacy policy, a company number and similar signals. It cannot tell you whether what it found is adequate, and finding nothing is not proof nothing exists. Nothing in a report is legal advice, and it is not a substitute for advice from a solicitor or a data protection specialist.
• A blocked or partial crawl produces a partial report. Where that happens the report says so.

We are a web development agency, and the tool exists partly to introduce our work. Read it in that light: it is written to be honest about what it finds, but it is not an independent assessment.

Every scan costs us a live browser session, two Google API calls and an AI analysis. To keep the tool free and available, it is capped:

• 3 fresh scans per browser, per day.
• 10 scans per network, per day.
• 1 fresh scan per website, per day — a second request for the same domain returns the existing report.
• An overall daily ceiling, and a limit on how many scans run at the same time.

Opening an existing report is free and unlimited. Automated access is not permitted, and the endpoint is bot-protected; attempting to evade these limits — by cycling browsers, addresses or identifiers — is a breach of the website terms.

If you have a legitimate need for more than the allowance, email sales@zeropixel.io and we will run them for you. That is a genuine offer, not a brush-off.

Running a scan does not require your name, email address or an account, and we do not ask for one. What we do process, and why, is set out in full in the privacy policy. In summary: the address you submit, what the scan finds on that site, a random identifier and a one-way hash of your IP address for the fairness limits above, and bot-detection signals.

If the scanned site publishes email addresses or phone numbers, the report lists them — checking that a business is contactable is one of the things it does. Those details are never added to a marketing list, sold, or used to contact anyone. See scanning someone else’s site.

The tool is free and provided as it is. We may change it, cap it further, or withdraw it entirely at any time and without notice. It depends on third-party services, and when one of those is unavailable a scan may fail or return partial results. We give no uptime commitment and no guarantee that any particular scan will succeed.

To the fullest extent the law allows, we are not liable for any loss arising from your use of the audit tool or your reliance on a report — including work done, money spent, or changes made on the strength of one, and including anything the report failed to identify.

The liability limits and exclusions in the website terms apply to this tool in full, including the overall cap. Nothing here excludes liability that cannot lawfully be excluded.

These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them. Where these terms and the website terms conflict on a point about the audit tool, this page wins.