Privacy notice
Updated October 17, 2026. PageEnhance is operated by two2six. Privacy contact: [email protected].
Website checks
We process the public website address you submit, limited public page source, response metadata and derived observations. Do not submit private pages, credentials, query strings or sensitive information. Source HTML is temporary and is not saved in report storage. Free scan results remain in server memory for five minutes after completion and in your open browser page until you reload or close it. A random access token is required to retrieve a scan. Scans are removed when they expire or the scanner restarts.
Saved reports and payments
Preparing checkout saves the derived report before opening Stripe. Unpaid report snapshots and order records expire after seven days; a processing payment may keep its snapshot for up to 30 days while confirmation is pending. After confirmed payment, the saved report and associated order records remain for 30 days. Expired records are removed by an hourly cleanup. Report storage contains the scanned website address, findings, dates, order and Stripe payment references, access expiry and payment/refund/dispute status. It does not contain raw HTML, payment card details, checkout email addresses, or plaintext report access keys.
This browser stores each purchase’s order ID and private access key in local website storage. My saved reports reads those links. They stay on your device until you clear website data. A private recovery link contains its key in the URL fragment; that fragment is not sent in HTTP requests and is removed from browser history when the report page opens. Anyone with the link can access its paid report. No sign-in or email recovery is provided automatically.
Stripe processes checkout, card details, payment contact information, refunds and financial records under Stripe’s privacy policy. We receive signed payment-status notifications. Stripe and the merchant may retain transaction records beyond report expiry for payment operations and applicable recordkeeping requirements. Test checkout uses Stripe’s sandbox and does not make a real charge.
Hosting and abuse prevention
Cloudflare hosts the frontend, scanner container, gateway and Durable Object storage. The application uses keyed hashes of network addresses for bounded admission and rate-limit records, rather than storing raw IP addresses. Current counters and an internal hashing key may persist across restarts. These admission records do not contain scanned page content or website addresses. Scanned websites receive public GET requests and can see the scanner’s network address and crawler identifier.
Cloudflare may process network addresses, request metadata, usage and security records under its privacy policy. Application observability logging is disabled; provider-level records may still exist. We use no advertising analytics or AI processing for these scans.
Support and deletion
Email the privacy contact for access or deletion requests. Include the order ID if relevant, but do not send private report links or card details. Support emails and any information you send are used to address your request. Deleting a saved report ends its online access; payment records held by Stripe may need to remain. You can delete locally saved report keys by clearing this site’s browser storage.