Privacy
What Steeplejack keeps about you, why, for how long, and what you can ask for. Steeplejack is in early testing, and this is an initial version that will be reviewed before it leaves testing.
- Who
-
Mike Street, a sole trader in the UK, decides how this information is used. Email steeplejack@mikestreety.co.uk with any question or request.
- Your account
-
Your name, email address and password (stored only as a one-way hash), and any passkeys you add (stored only as their public keys). Also the sites you track and the surveys you start, which count towards your limits.
This is used to run your account, so the lawful basis is the agreement between us when you sign up.
- Signing in
-
While you’re signed in, your session records the IP address and browser it was started from, so a session can be ended and misuse spotted. It’s deleted when the session ends.
- Emails
-
Steeplejack only emails you about your account: confirming your address, resetting your password, telling you if someone tried to sign up with your address, and significant changes to these pages. There’s no newsletter or marketing.
- Interest in Pro
-
If you register interest on the Pro page, Steeplejack records your account and, if you came from a report, which of your sites it was for. It’s used to email you about the Pro beta, and for nothing else. The lawful basis is your consent, and you can withdraw it on the same page at any time.
- Every visitor
-
The server logs each request, with the IP address, page and browser, to keep the service secure and working. Your IP address is also used for short-lived limits on surveys and sign-ups. Visits are counted with GoatCounter, which doesn’t use cookies or store IP addresses. It records the page, the referring site, and your browser, screen size and country.
The lawful basis for these is legitimate interests: keeping Steeplejack secure, stopping abuse and understanding which pages are used.
- Surveyed sites
-
A survey records facts about a website, not about the person who asked for it. Results are shared with everyone tracking the site, and a summary is public, but they never show who started a survey. If a site is run by a sole trader, its results may relate to them as a person; the lawful basis is legitimate interests, and the owner can ask for the site to be excluded, which stops surveys and hides its results. SteeplejackBot explains how.
- Who else
-
Nothing is sold or shared for marketing. These services handle data so that Steeplejack can run:
- Hetzner, which hosts Steeplejack’s server in Nuremberg, Germany
- an email provider, to send account emails
- Netlify, which runs the surveys: it receives the address of the site being surveyed, and nothing about you
- Google PageSpeed Insights, which measures performance: it receives the address of the site being surveyed, and nothing about you
- GoatCounter, which counts visits as described above.
- How long
-
- Your account: until you close it. An account that isn’t used for 18 months gets a warning, and is deleted at 24 months.
- Closed accounts: removed straight away.
- Interest in Pro: until you remove it or close your account.
- Server logs: 30 days.
- Surveys nobody claims: 15 days. Survey details: 12 months, after which only the scores remain.
- Opt-out and complaint records: as long as needed to honour them, with as little personal data as possible.
- Your rights
-
You can ask for a copy of your information, or for it to be corrected, deleted or restricted, and you can object to how it’s used. Email steeplejack@mikestreety.co.uk; you’ll get a reply within a month. You can close your account yourself from your account page.
If you’re unhappy with the answer, you can complain to the Information Commissioner’s Office.
- Cookies
- Steeplejack only uses cookies needed to sign in and to protect forms. Cookies lists them.
- Updated
- 9 November 2026