Privacy Policy

The short version

If you check a site by its address, our server reads that site's public pages, the same way a visitor's browser would, and shows you the result without saving it. Your WordPress export is analyzed in your own browser and is never uploaded to this site or anywhere else. If you ask for a quote, only the summary shown on screen is sent. We keep it, with your email address, for 12 months.

Checking a site by address

When you enter an address, our server fetches that site's public home page, its robots.txt and sitemap, and for WordPress sites the public parts of its REST API. That's at most 20 requests, identified as CoderB-MigrationCheck, and we skip anything the site's robots.txt asks automated tools not to read. Only public addresses can be checked.

The result is kept in our server's memory for one hour, so checking the same site again doesn't make it fetch the site again, and is then discarded. It isn't written to our database unless you ask for a quote. When a check fails, our server log records the site's name, not the full address you typed. To prevent abuse, the number of checks from each connection is limited, also in memory only.

Your export file

A WordPress export contains more than your posts. It can include author and commenter email addresses, commenter IP addresses, drafts, private posts, and the passwords on password-protected posts. That's why the file is read only by code running on this page, in your browser's memory. It isn't sent over the network, it isn't saved to browser storage, and it's gone when you close or reload the tab.

The report shows only counts and the names of shortcodes, blocks and plugins. It never displays or keeps post titles, content, email addresses or passwords from the file.

Your Plugins page

If you paste your Plugins page, it's processed the same way: on this page, in memory, and never sent anywhere.

If you ask for a quote

For an export, asking for a quote is the only thing that sends anything to our server. What's sent is your email address and the summary shown in the report: counts, your site's name, address and WordPress version, the permalink pattern, and the names of plugins, shortcodes and blocks. You can see the exact data under "See exactly what's sent" before you submit. Your export file is never part of it.

For a site check, what's sent is your email address and a reference to the check; our server saves the result it already showed you. If the check couldn't read the site and you ask us to take a look, only your email address and the site's address are saved.

That information is used to send you one email, and is kept so Coder B Dev can see who asked and follow up if you reply. It's stored in our own database, never shared or sold, never added to a mailing list, and deleted automatically after 12 months. To have it deleted sooner, reply to the email and ask. Nightly backups of the database are kept for 14 days, so a deleted copy can remain in a backup for up to 14 more days.

Third parties

No analytics, ad trackers, or third-party scripts run on this site. Emailed reports are delivered through Mailtrap, which processes the message only to deliver it.