Privacy policy
Last updated October 2026
What we collect
- Your email address and password. The password is stored only as a hash by our authentication provider. We can't read it.
- The website addresses and notes you send us when you request a test.
- The reports we write about those websites, and the tip amounts you choose.
Why we collect it
To run the service: to identify your account, show you the status of your requests, deliver your reports, and contact you about them.
Who has access
Your reports are visible to you and to the GorillaQA team. We don't sell your data and we don't share it for advertising. Our service providers process it only to run GorillaQA: database and authentication hosting (Supabase), website hosting (Vercel), analytics (PostHog, only with your consent), email delivery, and a payment processor if you choose to tip.
What we do on your website
We use your website the way an ordinary customer would, and we treat everything we see there as confidential. Reports are shared only with you.
Cookies and analytics
Essential. We store your login session in your browser so you stay signed in. This doesn't need your consent.
Analytics, only if you accept. If you choose "Accept analytics", we use PostHog (hosted in the EU) to understand how people use the site and where they get stuck. We record events such as which sections of the home page were viewed, whether a request was started and finished, and whether an error happened, together with your browser, device type and approximate region. On the public pages (home, privacy, terms) we also record anonymous session replays with every form field hidden. We don't record the pages inside your account, your website addresses, your notes or your reports, and we never send your email address to the analytics tool. Our own team's activity is excluded.
There are no advertising cookies and we don't sell data. If you choose "Only essential" (or your browser sends a Global Privacy Control signal), nothing is loaded. You can change your choice at any time with "Cookie settings" in the footer or the menu.
How long we keep it
For as long as your account exists. Ask us to delete your account and we will remove your data, except what the law requires us to keep.
Your rights
You can ask to see, correct, export or delete the data we hold about you. Email support@gorillaqa.com.
Changes
If we change this policy in a way that matters, we'll tell you by email or on the site.