Privacy policy
What we collect, why we collect it, and how to have it deleted.
Last reviewed 30 September 2026.
Who operates this site
Cited Tomorrow operates www.citedtomorrow.com. If you have a question about anything on this page, or you want us to delete something we hold about you, write to [email protected].
The short version
We run no analytics, no advertising and no tracking of any kind. We do not buy or sell personal data, and we do not run a mailing list. The only information we hold about you is what you choose to type into one of our two forms.
When you use the free website check
You give us a website address. We use it to fetch that site’s public pages and run automated tests on them — the same pages any visitor or search engine can already request.
We keep the address you submitted, the result and the date, so that your report stays available at its link.
To stop the form being abused, we also store a one-way hash of your IP address for five minutes. It cannot be read back as an IP address, and it is deleted automatically.
When you request a diagnostic
The booking form asks for your name, email address, website address, what kind of site it is, and whatever you choose to tell us about the problem. We use it to reply to you and to work out what the job involves. It reaches us by email.
We do not add you to a mailing list, and we do not pass it to anyone else.
Cookies
We set no cookies on visitors. WordPress sets cookies only for people who log in to administer this site, and our caching software may set a technical cookie for those same logged-in users. Neither is used to track anybody.
Fonts, embeds and third parties
Our fonts are served from our own server, so reading this site does not send your IP address to Google or any other font provider. We embed no analytics, no social widgets, no chat boxes and no advertising scripts.
Comments are switched off across the site, so we collect nothing that way.
Server logs
Our hosting provider keeps standard web server logs, which include visitor IP addresses, for security and troubleshooting. That is ordinary hosting practice and applies to every site on the internet.
How long we keep things
- Check results: for as long as the report link is live.
- Diagnostic requests: in our email while we are in contact with you, and afterwards as an ordinary business record.
- Rate-limiting hash: five minutes.
If you would rather we deleted any of it sooner, ask us and we will.
Your rights
If you are in the EU or the UK you can ask us for a copy of what we hold about you, ask us to correct it or delete it, or object to the way we use it. Write to [email protected] and we will answer within a month. You can also complain to your national data protection authority.
Changes to this policy
When what we do changes, we update this page and change the date at the top.