Privacy Policy
Effective July 1, 2026 · KTLYST Labs, San Jose, California
You paste a website URL and CheapCheck reads that public page and grades it. The free instant check runs with no account. The $29 full critique requires you to sign in, and then our server reads the page again and calls a model to write your critique and redesign spec. We do not store the pages you submit; they are processed for that one request and discarded. We use Cloudflare Turnstile to keep bots out, Stripe to take the one-time payment, Supabase for your account, and first-party analytics. We do not sell your data.
Who we are
This app ("CheapCheck") is operated by KTLYST Labs, based in San Jose, California, USA. You can reach us at crew@ktlystlabs.com.
What CheapCheck does with a URL
Free instant check. When you submit a URL, we fetch that public page and analyze its design and on-page signals to produce a grade and a short list of issues. We process the page only to generate that result; we do not store the page contents, and there is no archive of the sites you check.
$29 full critique. If you buy a pass and run the full critique, our server reads the page again and calls an AI model to write a detailed critique and a redesign spec, which we stream back to you. Again, we process the page only for that request and do not store it. The critique is generated for you in your browser session.
What we process to run the service
To run the free tier without it being drained by abuse, our server processes: your IP address and standard request data, used only to rate-limit and prevent abuse; a Cloudflare Turnstile token to check you are not a bot; and aggregate counters (how many checks were run, how many passes sold). We also use first-party product analytics (PostHog) to see which pages and steps visitors use, so we can improve the product. We do not build advertising or cross-site profiles, and we do not store the pages you submit.
The full critique requires an account, so we can grant your one-time pass to your user id rather than a cookie. If you buy a pass, Stripe processes your payment and the email you give it for the receipt. We receive a confirmation that a pass was paid for, tied to a payment session id (not your card details). See Stripe's privacy policy.
Stored on your device
Your browser keeps your settings in its own local storage, on your device. We also set functional cookies for sign-in and to record that a pass was purchased. You can clear all of this any time from your browser's site-data controls.
Third parties involved
Anthropic generates the critique and redesign spec on the paid tier. See anthropic.com/legal/privacy. Vercel hosts the site and serves the endpoints; like any host it processes standard request data such as IP and browser type. Cloudflare provides the Turnstile bot check. Stripe processes payments. Upstash stores the usage counters and pass records. Supabase stores your account (email and login). PostHog provides first-party product analytics (page views and funnel steps). We use these to run and protect the service, not to track or profile you.
Cookies
We use functional cookies only: a sign-in session cookie, and a pass cookie if you buy one. We do not use advertising or cross-site tracking cookies.
Your choices and rights
We do not store the pages you check, and the operational data we do keep (abuse/rate-limit data, your account, payment confirmations) is minimal and not tied to a profile of you. Clear this site's cookies and storage to reset your device. For a payment record, contact Stripe or us.
We do not and will not sell or share your personal information. If you are a California resident, this is also our notice under the California Consumer Privacy Act (as amended by the CPRA): the categories we collect are limited to identifiers (account email, IP) and commercial information (a record that a pass was purchased); we do not sell or share personal information. Residents of regions with similar laws (such as the EU/UK GDPR) have the corresponding rights - contact us at crew@ktlystlabs.com to exercise them.
Only check sites you're allowed to
CheapCheck reads the public page at the URL you submit. Please only submit URLs you own or are otherwise permitted to analyze. You are responsible for the URLs you enter.
Children
This app is not directed to children and is intended for adults building websites and products.
Not professional advice
The critique is design feedback generated by an AI model against a codified design engine. It is provided as is, without warranty, and is not professional design, legal, or business advice, and does not guarantee any particular outcome.
Changes
If we change this policy, we will update the effective date above. Material changes will be reflected on this page.
Questions or requests: crew@ktlystlabs.com.