Privacy Policy

Who we are

Ascribe (“we”) runs https://ascribe.dev, a tool that analyseswhether AI engines can read and cite a website. For any question about this policy, write to hello@ascribe.dev.

What we collect

• Account data: your email address, the name you provide, and a cryptographic hash of your password. We never store your password itself and cannot recover it.
• What you analyse: the domains you submit and the reports we generate from them, kept so you can see your history.
• Usage counters: how many times you have used each feature in the current cycle, to enforce plan limits.
• Session and security data: a session token, plus the IP address and browser identifier attached to it, used to keep you signed in and to rate-limit abuse.

We do not collect payment details, we do not run advertising trackers, and we do not buy or sell personal data.

Why we use it

• To create your account and keep you signed in.
• To run the analyses you ask for and show you their history.
• To send transactional email: address verification and password resets.
• To enforce usage limits and protect the service from abuse.

We process this data to provide the service you signed up for, and to meet our own legitimate interest in keeping it secure. We do not send marketing email.

Who else processes it

We rely on these providers. Each one only receives what it needs to do its job:

• Vercel — hosting. Processes requests to the site.
• Supabase — database. Stores your account and your reports.
• Resend — email delivery. Receives your address to send verification and password-reset messages.
• Perplexity — AI engine. Receives the questions generated from the domain you analyse. It does not receive your identity.

These providers operate outside your country, so using the service involves international transfer of the data listed above.

Cookies

We set one cookie: your session, so you stay signed in. It is strictly necessary for the service to work and cannot be turned off while you use your account. We do not use advertising or analytics cookies, which is why you are not seeing a consent banner.

How long we keep it

• Account and reports: while your account exists. Delete your account and we delete them.
• Sessions: expire after 7 days, or immediately when you sign out or change your password.
• Verification and reset links: 1 hour, single use.
• Rate-limit counters: a rolling window, measured in minutes.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or send it to you in a portable format. You can also object to how we process it. Write to hello@ascribe.dev and we will respond within 30 days. Deleting your account removes your data from our database; backups roll off within 30 days.

Security

Passwords are stored hashed and salted. Traffic is encrypted in transit. Sessions are revocable and are invalidated when you change your password. No system is perfectly secure — if we become aware of a breach affecting your data, we will notify you.

Children

The service is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above. Material changes will be announced by email to registered users.