Privacy

Last updated 26 September 2026. LaunchGrill is run by one person, Said Bouigherdaine.

What we store

• Your email address, because signing in needs one. If you use Google, we get your email and nothing else from them.
• The URLs you grill, and what we captured from them: the page text, a screenshot of the first screen, a screenshot of the whole page, and the site’s favicon. If you download a launch brief from a grill, we also keep the taglines and descriptions drafted for it from that text; the name you type for the brief goes into the file and is not stored.
• Launch posts pasted before 5 September 2026, when we stopped asking for them. They stay on the grills that used them.
• The grill itself — scores, findings, the verdict.
• How you arrived: whether you came from a shared grill, a public grill page, or directly. Two cookies, lg_src and lg_ref, hold that for 30 days.
• Feedback you send us from the Feedback tab: the message, the page you sent it from, and your email address only if you add one. It is kept until you ask us to delete it.
• Product events: that a grill was created, finished, failed, viewed or shared. Enough to know whether the product works, not enough to follow you around.
• Takedowns: if someone asks for a grill of their page to come down, we keep their email address, the address they claimed, whether it matched that page’s domain, and what each side said. We use it to tell them what was decided, and to see when the same address asks repeatedly.
• Grills I start for someone: the link to where they asked for it. Only I see it; it is the record that they asked.
• Claims: if you claim a launch I grilled for you, we keep your account email, whether it is at that page’s domain, what you wrote, and what I decided. We use it to tell you the answer.
• Removed grills: if I remove a grill, the reason, its score and its address stay in our event log. Nothing else about it does.
• The wait before a re-grill, and the launch slot: for each page you add we keep the address, and — if you grilled it — when you last did and how many times. It survives removing the launch, so removing and re-adding a page cannot be used to grill sooner or to free one of your ten launch slots. We keep the address of a launch you removed without ever grilling it for that second reason alone. Nothing else about the grill survives.
• Your address, if you asked about a human read. A separate list from your account, and it stays even if you delete the account — see below.
• If a human read ever becomes something you can buy: what you wrote in the intake, and Stripe’s record of the payment. We never see your card. Nobody has ever paid for one.

Your grills are public

This is the part worth reading twice. Every grill gets a public permalink, appears in the record, and can be indexed by search engines. There is no private option and nothing you can pay for one — the product runs on grills being readable.

A handful of grills made private before 5 September 2026 stay private. That control no longer exists, so nothing new can be hidden that way.

If someone grilled your page and you did not run it, the link at the bottom of that grill takes it down — immediately if you write from an address on that page’s own domain, and otherwise by hand within a day.

Who else processes it

• Supabase — where your account and your grills are stored, and where you sign in. On servers in London, in the UK.
• Vercel — runs the site.
• Google (AI Studio), whose model reads the page text and screenshots and writes the critique. Your page content goes to them, and on the free tier we use, Google may use what it receives to improve its models. Your email does not go to them.
• Google (Analytics) — counts visits to this site, only if you allowed it. It then receives your page views, your rough location, and your device and browser, on Google’s servers, which may be outside the UK. It never receives your email address or anything from your grills.
• Microsoft (Clarity) — shows us how pages are used, only if you allowed it. It records the page you are on as you use it: what you scroll to, where you click, how the mouse moves, plus your rough location, device and browser. It does not record anything you type into a box, and it never receives your email address or the contents of your grills. Microsoft holds it on their servers, which may be outside the UK.
• Sentry — tells us when the site breaks. It receives the error, the page it happened on, your browser and your IP address, on servers in the EU. It does not receive what you typed, the contents of your grills, or your email address.
• Stripe — payments.
• Resend — the emails we send you.
• Telegram — how Said is told what happens on the site. It receives feedback you send, word for word, and short notices when you sign in or a grill starts, finishes or fails. Those messages include your email address — the one you sign in with, or the one you typed into the feedback form — and, for grills, the address of the page being grilled.
• A machine we rent ourselves, in Nuremberg, Germany, which opens the page being grilled and takes the screenshots.

Visits are counted by self-hosted Umami on that same server, which sets no cookies and keeps what it collects on our machine. Google Analytics and Microsoft Clarity run only if you allowed it when asked — say no, or never answer, and neither script is loaded at all. You can change your mind from “Cookies” in the footer. No advertising pixels, and nothing here follows you to other sites.

Cookies

Three unless you allow analytics, all first-party: the sign-in cookie that keeps you logged in, and lg_src and lg_ref, which remember where you came from for 30 days so we can tell whether shared grills actually bring people in. Allow analytics and up to four more are set. Google Analytics adds _ga and _ga_<id>, which count you as one visitor rather than several, for up to two years. Microsoft Clarity may add _clck, which does the same job for a year, and _clsk, which ties one visit’s pages together and lasts a day — depending on how it is set up it records without either. Your answer itself is kept in your browser’s own storage, not in a cookie. We set no advertising cookies. Clarity will read two of Microsoft’s advertising cookies, _uetvid and _uetmsclkid, if something else has already put them on your machine — it never creates them here, because that needs an advertising-consent signal this site does not send.

How long it stays

• Grills and screenshots: until you remove the launch they belong to, or delete your account.
• After you remove a launch we keep one line about it: the address, the date you last grilled it, and how many times. No score, no findings, no screenshot. It is there so removing and re-adding a page cannot be used to skip the wait between grills, and it goes when your account does.
• Demo credentials for a human read: removed from the database the moment the grill is delivered. If you start a purchase and never finish paying, they go with the abandoned order — email us and we will clear it sooner.
• Product events: 24 months.
• The human-read list: until you ask to come off it.
• Payment records: as long as tax law requires. That is Stripe’s clock, not ours.

Getting it back, or getting rid of it

One launch. Your grills lists your launches, and removing one destroys it and every grill of it — the scores, the findings, the screenshots and the public pages, whose links stop working. It cannot be undone. It is all-or-nothing per launch on purpose: you cannot delete a low score and keep a high one on the same page.

Everything. Your account page exports everything we hold about you as one file you can download and open elsewhere, and deletes your account. Deletion removes your grills, your launches, the screenshots, your events, the re-grill waits and your sign-in. It cannot be undone, and any public grills you ran disappear with it.

Except the human-read list. If you left an address there, deleting your account does not remove it — you asked for that separately, and it is kept separately. Email grill@launchgrill.com and it goes the same day. If that list is ever mailed, every message will carry a link that does the same thing.

You can also email grill@launchgrill.com and I will do it by hand.

If something goes wrong

There is no security team to escalate to — there is me. Write to grill@launchgrill.com and you will get a person, usually the same day. If you are in the EU or UK you can also complain to your local data protection authority.