Privacy and report retention.

Rebuild processes public URLs and selected technical evidence to prepare website assessments. Do not submit URLs containing credentials, access tokens, or private query strings. Free analysis does not require an email address.

Reports use unguessable access tokens, are excluded from indexing, and expire after 24 hours. Anyone with a report token can view that report; treat it as private. Raw fetched HTML is not published. Operational records stay separate from other projects.

Inquiry details are used to respond to the requested service. Optional follow-up requires a separate opt-in. Inquiries are retained for up to 90 days unless an active engagement requires an agreed retention period. We do not sell inquiry data.

No third-party analytics is enabled by default. Aggregate conversion instrumentation, if enabled later, must omit URLs, report tokens, email addresses, and persistent visitor identifiers.

Request deletion or ask a privacy question through the contact form. If the service is unavailable, please use the contact route at robertdevore.com. Hosting providers may retain limited security logs under their own policies. Cloudflare provides the website, API, and dedicated D1 storage. Managed migration and agency inquiries also generate an email notification to the Rebuild owner through Cloudflare Email Service. That notification contains your inquiry details and is retained in the owner’s mailbox for inquiry handling; deletion requests cover these copies too. Inquiries are reviewed manually. No automated customer emails or live checkout are enabled.