Last updated: 2 October 2026
1. Who we are
SchemaSignal is operated by Twenty Signals. We are responsible for the personal information we use to run this website and service. For privacy questions or requests, email hello@twentysignals.co.uk.
1A. Free page checks
The free checker at /check lets anyone check one public page without an account. We fetch the page you enter and keep a temporary report (page address, title, description, JSON-LD and findings; no raw HTML) tied to your browser session for up to 24 hours, then clean it up. Successful results may be reused from a shared cache for at most 15 minutes. To limit abuse we store keyed (hashed) network address identifiers for rate limiting. We do not add you to marketing email because you ran a check. Watching a result requires you to sign in and confirm.
2. Information we collect
- Account information: your email address, profile name, account identifier and, if supplied, profile image. Our authentication provider, Clerk, handles sign-in credentials and account verification.
- Monitoring information: the page URLs and monitor names you enter, client groups, check schedules, publicly accessible JSON-LD from those pages, findings, snapshots and check history. Public page markup can itself contain personal information.
- Optional Search Console connection: when you connect a Google account, we receive read-only access to its accessible Search Console properties. We store encrypted access and refresh credentials, your selected properties, and indexed URL Inspection findings, crawl dates, canonical URLs and rich-result issue history. We do not request access to Gmail, Drive or the ability to change your Search Console properties.
- Technical information: information needed to operate and secure the service, such as network addresses, browser details, request logs, timestamps and error information.
- Correspondence: information you send us when asking for help or making a privacy request.
- Optional analytics: only after you allow analytics, Google Analytics can collect page addresses, interactions, browser and device information, approximate location and cookie-based identifiers. We do not intentionally send account names, email addresses or monitored page contents to Google Analytics.
We receive information directly from you, from the public pages you ask us to check, and from the providers used to deliver the service. Please only submit pages you are authorised to monitor, and do not put passwords, access tokens or sensitive personal information in monitor names or URLs.
3. How we use information
We use information to create and secure accounts, check the pages you select, organise your workspace, show findings and history, answer enquiries, maintain reliability and prevent misuse. If you consent, analytics helps us understand how the site is used and improve it. We do not sell your personal information or use this analytics setup for advertising.
We use Google Search Console information only to provide the monitoring and inspection features you request. We do not use it for advertising or to train general-purpose AI models. SchemaSignal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. This optional connection is separate from Google sign-in and optional website analytics.
4. Our legal bases
- Providing the service: processing necessary to perform our agreement with you or take steps you request before that agreement.
- Security, support and monitoring: our legitimate interests in running a reliable, secure service, answering enquiries and providing the monitoring you request, taking your rights into account. This also applies where public page markup contains personal information about someone other than our account holder.
- Optional analytics: your consent, which you can withdraw through Cookie settings without affecting the lawfulness of earlier processing.
- Legal obligations: where we must retain or disclose information to comply with applicable law.
5. Providers and sharing
We use Replit for hosting and infrastructure, Clerk for authentication, and Google Analytics for optional website analytics. We also use Google Fonts to deliver the site’s fonts; your browser contacts Google to retrieve those files, independently of your analytics choice. These providers receive information needed to provide their respective services, which can include your network address and request information. Google may also process information under its own terms and privacy policy.
We may disclose information where legally required, to protect the service or others, or as part of a business transfer with appropriate protections. We do not make your workspace publicly available simply because you monitor a public page.
6. International processing
Our providers may process information in countries outside the UK or European Economic Area, including the United States. Where applicable law requires protections for international transfers, those transfers must be covered by an appropriate legal mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about the safeguards relevant to your data.
7. How long we keep information
We keep account and workspace information while needed to provide your account and service. Monitoring history is kept so you can review earlier checks; there is currently no automatic age-based deletion of that history. Deleting a monitor removes its findings, snapshots and check history from the live application database.
We retain support messages and security records only as reasonably needed for their purpose, to resolve disputes or meet legal obligations. Backups and provider-held records can have different retention periods. Contact us to request account deletion or more specific retention information; deleting a monitor does not itself delete your Clerk account.
Cookie preferences expire after 180 days. Analytics cookies can last up to two years. Cookie lifetimes are not the same as retention of information already received by Google; contact us for details of the current analytics retention settings.
Search Console credentials are kept until the connection is disconnected. Inspection history is kept until the connection is disconnected or the relevant monitor is deleted. Unlinking a property alone keeps its inspection history. Disconnecting a Google connection removes its saved credentials, property bindings and inspection history from our active database without deleting your monitors, and attempts to revoke Google’s authorisation. If Google cannot confirm revocation, we report that separately; you can also withdraw permission through your Google account settings. Backup copies may remain until their normal expiry.
8. Cookies and your choices
Necessary sign-in, security and preference storage supports the service. Google Analytics does not load unless you allow it. You can reject optional cookies, still use the site, and change your choice at any time using Cookie settings in the footer. See our Cookie policy for details.
9. Your rights
Depending on applicable law and the circumstances, you can request access to your information, correction, deletion, restriction of processing or a portable copy, and object to processing based on legitimate interests. You can withdraw analytics consent at any time. We may need to verify your identity before acting on a request.
Send requests to hello@twentysignals.co.uk. You may also complain to your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO). We would welcome the chance to address your concerns first, but you do not have to contact us before complaining.
10. Security, children and updates
We use access controls and secure connections to help protect information, but no online service can guarantee absolute security. SchemaSignal is intended for professional and business use, not directed at children, and we do not knowingly seek children’s personal information.
We may update this policy when the service or our practices change. The date above shows the latest version; we will highlight material changes where appropriate.