Public URL in. No account or saved scan history.

The checker accepts a public HTTP or HTTPS URL. Do not submit private, confidential, authenticated, internal, or token-bearing URLs. Query strings can contain sensitive values; remove them before scanning unless they are genuinely public and necessary to the page.

A Quick Scan may request the submitted page, validated redirects, the final origin's /robots.txt, /sitemap.xml, /llms.txt, and one same-origin sitemap declared by robots.txt when needed. A rendered comparison may open the public page in Cloudflare Browser Run.

WebVisible does not accept your cookies, credentials, authorization headers, uploaded files, proxy settings, or custom browser scripts.

• No account or database-backed scan history is created in the initial product.
• Quick Scan structured results can be held in Cloudflare's cache for approximately five minutes to reduce duplicate requests.
• The rendered page, readable text, accessibility structure, and page response are processed only for the check, reduced to a small evidence summary, and are not stored as a permanent report.
• The interface does not write a “recent scans” list to local storage.
• A JSON export is created locally in your browser only when you choose Download JSON.

Cloudflare and WebVisible may process ordinary service metadata needed to operate and secure the site, including IP-derived rate-limit keys, request time, endpoint, status class, duration, cache state, response-size bucket, browser milliseconds used, and error category.

Application logs are designed not to include page bodies, robots contents, cookies, credentials, browser artifacts, or full query strings. Rate-limit subjects are hashed before use by the application.

WebVisible uses Cloudflare Analytics Engine to count whether people choose blocker diagnosis, crawler access, JavaScript delivery, or fix verification; whether a Quick Scan, browser comparison, or JSON download was used; and the broad result state and duration bucket.

The measurement stores only the base registered domain, such as example.com. It does not store the submitted path, query string, full URL, IP address, request ID, user agent, page content, crawler-rule contents, cookies, or account identity. No client analytics library or tracking cookie is loaded.

Global Privacy Control (Sec-GPC: 1) and Do Not Track (DNT: 1) requests skip these product data points. Aggregated measurements remain only within Cloudflare Analytics Engine's limited service retention window.

WebVisible runs on Cloudflare Workers, Static Assets, Cache, Browser Run, and Analytics Engine. Cloudflare processes requests under its own service terms and privacy commitments. The production interface does not load advertising, analytics, social, chat, or font scripts from third parties.

The scanner rejects many unsafe target forms, validates every redirect, reads bounded response bodies, and rate-limits expensive actions. No public web scanner can guarantee that a submitted public page contains no personal information, so use the tool only for URLs you are authorized to test and comfortable sending to a diagnostic service.

Material policy changes will be reflected on this page with a new effective date. Future optional accounts or monitoring would require an updated notice before launch.