Privacy

AltReview is a one-page alt text checker at https://alttextreview.com. This policy describes the preview that is shipping now.

What a check sends to our server

When you paste a URL, the server fetches that public address and the image URLs it selects for visual review. The request is limited to http and https, blocks private and metadata addresses, and does not use your cookies or your site login. We do not read files from your computer.

What is stored

• Scan results, thumbnails, and drafts stay in your browser session storage for this tab. This preview does not write those rows to a database.
• Page HTML and original image files are held only long enough to build the response. They are not kept after the response is sent.
• Thumbnails returned for visual review live in the response and in your browser. They are not stored on the server.
• If you join the waitlist and DATABASE_URL is configured, we store the email address, a source label such as "pricing", and the time it was saved. If the database is not configured, the form says so and the email is not saved.
• Account email from a magic link is not collected, because login is not in this preview.
• Card numbers are not collected. Checkout is not connected.

Who processes it

• Cloudflare Workers, which hosts this app. The Worker fetches the page URL you submit.
• OpenAI, only if the operator has set OPENAI_API_KEY and you run a visual review. On a normal Node server the image is downscaled to fit inside 512 pixels. On the Cloudflare Worker, only images already under 512KB are sent, with short page context, to gpt-5.4-mini (or the model named in OPENAI_MODEL). If the key is missing, images are not sent.
• Postgres, only if DATABASE_URL is set, and only for waitlist emails. On Cloudflare that URL is read by Neon's HTTP driver. Locally it is a normal Postgres connection.

How long it stays

Anonymous scan results remain in the browser until you clear the scan, close the tab's session storage, or clear site data. We do not keep a server copy to delete. Waitlist emails, when a database is configured, stay until you ask us to delete them. There is no 30-day project archive in this preview because project rows are not stored on the server.

How to delete

Email privacy@alttextreview.com with the subject "Delete my AltReview data" and the address you submitted. We will delete matching waitlist rows. Browser copies are under your control: use Clear scan, or clear this site's data in your browser. If the deployment has no database, there is no server copy of the email.

What we do not do

We do not sell personal information. We do not use the checker to grant a compliance certificate. Logs record that a check or waitlist submission happened. They do not record card data, and they should not record API keys. Do not put secrets in a URL you ask us to fetch.