Privacy policy

Last updated 9 September 2026. Short version: we collect very little, we do not sell anything, and the report is about a website, not about you.

Who we are

Cohelm operates Cohelm Business Health Check at https://cohelm.co. Contact: hello@cohelm.co.

What we collect when you run a check

• The website address you enter. We fetch public pages of that site and public DNS and registry records about its domain to produce the report. See About CohelmBot for exactly what is fetched.
• The report itself — the findings, score and a snapshot of public business facts read from the site (name, phone, email, address if published). It is held in memory for up to two hours so the report link works, then discarded.
• Basic usage data: timestamp, page path, the hostname submitted for a check, score, duration, country, device/browser type and referring hostname. We retain this for 90 days to understand usage and fix errors. We do not store URL query strings or the full page content in this analytics database.

Analytics

Our own first-party, cookieless beacon counts page views, approximate unique visitors and report runs. Recognized search and AI crawler requests are recorded separately and classified from their user-agent; suspected automation may also be labeled separately. A raw IP address is used only in memory to create a secret-keyed, monthly rotating identifier; the raw address is never stored. The identifier is not shared outside Cohelm and cannot be reversed into an IP address. We also use Google Analytics 4 and Vercel Web Analytics. Google Analytics may set cookies; Vercel Web Analytics is cookieless. We do not use advertising or retargeting pixels. Blocking analytics does not affect the health check.

What we do not do

• We do not require an account or ask for your name or email to run a check.
• We do not sell, rent or share personal data with third parties for their own purposes.
• We do not contact the businesses whose sites are checked.

Payments

If and when paid reports are offered, payment is processed by Stripe. We never see or store card numbers. Stripe's privacy policy applies to the payment itself.

Data about your website

The information in a report is read from public sources — your own website, public DNS and public registries — in the same way a browser or search engine reads them. If you operate a website and want it excluded from checks, add User-agent: CohelmBot / Disallow: / to your robots.txt, or email us.

Hosting and processors

The site runs on Vercel (USA). Third-party data sources used to build a report include Google PageSpeed Insights, public DNS resolvers, RDAP registry servers and the Internet Archive. Each receives only the domain or URL being checked.

Your rights

Depending on where you live you may have rights to access, correct or delete personal data. Because we hold almost none, the practical route is to email hello@cohelm.co and we will respond within 30 days.

Changes

We will update this page when our practices change and revise the date at the top.