AmPuH
Privacy Policy
What is collected, what is stored, what is never stored, and for how long.
This policy describes this installation of AmPuH, operated by AmPuH Labs. It is self-hosted software: the operator controls the server and is the data controller for anything stored here.
1. What is collected when you run an audit
Running an audit collects only what the audit needs:
| Data | Why | Kept for |
|---|---|---|
| The URL you submit | It is the thing being audited | Stored with the report |
| The report produced | So you can reopen and share it | 30 days, then deleted |
| Your IP address | Rate limiting, to stop the tool being used to hammer other sites | Short lived, in logs |
| Your browser user agent | Diagnosing a failed audit | Short lived, in logs |
No account is required to run an audit, so no name, email address or password is collected from visitors. There is no analytics or advertising tracking, no third party scripts beyond the CAPTCHA described below, and no cross site tracking of any kind.
2. Cookies
One session cookie, and only for the administrator sign in. It holds a session identifier and nothing else, is marked HttpOnly and SameSite, and is removed on sign out. Visitors who only run audits are not given a cookie at all.
3. Anti-abuse verification
The audit form is protected against automated abuse. Which method is active depends on how the operator configured this installation:
- Built-in proof of work. The default. Runs entirely on this server and in your browser, and sends nothing to anyone.
- Google reCAPTCHA. If enabled, your interaction with the form and your IP address are processed by Google under Google's privacy policy.
4. Google account data, and the Limited Use commitment
The operator may optionally connect a Google account so this tool can create its own API keys and read Search Console data. Only the operator can do this, and it is never required of a visitor.
The permissions requested, and the only use each is put to:
| Scope | Sole purpose |
|---|---|
openid, userinfo.email, userinfo.profile | Displaying which account is connected |
cloudplatformprojects.readonly | Listing Cloud projects so one can be selected |
service.management | Enabling PageSpeed Insights and Safe Browsing on that project |
cloud-platform | Creating and rotating API keys. Optional, and off by default. |
webmasters.readonly | Listing verified properties and reading their indexing data |
cloud-billing.readonly | Showing whether the project has billing attached. Optional. |
Limited Use. This application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Google user data is used only to provide the features described above, visible in this tool.
- It is never sold, and never transferred to any third party.
- It is never used for advertising, retargeting or audience building.
- It is never used to train any machine learning or AI model.
- No human reads it. Nobody other than the operator of this installation can see it, and there is no support channel through which it is transmitted.
5. How credentials are stored
Tokens and API keys are held in a single file outside the web configuration, encrypted at rest where the server provides an encryption extension. They are never written to the configuration files an operator might back up or share, never sent to the browser, and never written to any log: log entries record a one way fingerprint instead of a value.
Google data itself is not stored. Project lists and property names are cached so the interface can render without repeated API calls; indexing data is read when requested, shown, and discarded.
6. Revoking access
The operator can disconnect at any time from within this tool, which revokes the grant at Google and erases the stored tokens here. Independently of this tool, access can be revoked at any time from myaccount.google.com/permissions.
7. Sharing
Data leaves this server in only these cases, all of them initiated by a user action:
- The audited website. Auditing a URL means requesting it, so that site sees a request from this server.
- Google. Only when a Google-backed check is run, and only the URL being checked.
- Nobody else. No analytics provider, no advertising network, no data broker, no AI service.
8. Your rights
Contact the operator of this installation to ask what is held about you, to have it corrected, or to have it deleted. Reports are deleted automatically after 30 days in any case, and the operator can delete any report immediately on request.
9. Children
This is a technical tool for website owners. It is not directed at children and collects nothing knowingly from them.
10. Changes
Material changes will be reflected in the date at the top of this page. Because this is self-hosted software, the operator may amend this policy to match how they actually run this installation.