Is Croast really free?

Yes. No signup, no credit card. Each audit takes ~6 seconds and uses both a hand-tuned rule engine and an optional AI layer.

Headline strength, CTA copy and count, social proof, risk-reversal, specificity, word count, meta description, FAQ presence, pricing visibility, trust signals, and objection coverage.

No server-side storage. Shareable roast links are encoded directly into the URL — the recipient can decode them client-side.

How accurate is the score?

The score is rule-derived, not predictive. It's a directional audit, not an A/B test. Use it to find issues, then run your own experiments.

§ Privacy · Filed under: Records

We do not store your URL. Or your page. Or your email unless you opt in.

Croast was built around a single privacy claim: the audit should not require us to remember anything about you. Below is exactly what is on file, where it lives, and how to remove it.

What we collect

−Nothing. By default, no account is required and no server-side log of your URLs is kept.
−If you submit your email to the optional newsletter form, we store it so we can send you conversion tips. Unsubscribe at any time.
−Plausible analytics (only loaded if enabled) counts page views. No cookies, no fingerprinting, no cross-site tracking.
−If you upgrade to Pro, we set an authentication cookie (croast_pro_token, 30-day expiry). It is required to call the roast endpoint at your elevated rate. Clear cookies to remove.

Where the audit runs

When you submit a URL, our server fetches the page HTML, runs the analysis in memory, and returns a verdict. The HTML is not written to disk or analyzed for any other purpose. Shareable roast links are encoded directly into the URL — your browser and the recipient's browser decode them; our server never sees them open or share them.

Local storage on your device

Saved verdicts live in your browser's localStorage. Clearing your browser data erases them. Visit /history to view or strike individual entries.

Cookies and local storage

−croast_pro_token — Pro authentication, 30 days. Set on /welcome, sent on every /api/roast call. Required to use the elevated rate. Clear via browser settings.
−Plausible analytics — only set when NEXT_PUBLIC_PLAUSIBLE_DOMAIN is configured. Plausible is cookieless by design.
−croast_history_v1 — localStorage on your device only. Holds your saved verdicts. Never transmitted.
−croast_onboarded_v1, croast_privacy_ack_v1, croast_subscribed_v1 — localStorage flags for the onboarding tooltip, privacy notice, and email-capture dismissal. Device-local.

Third parties

We use Vercel for hosting (privacy policy at vercel.com/legal/privacy-policy), Polar.sh for Pro billing (polar.sh/legal/privacy), and, optionally, Plausible for analytics. None of them receive any URLs you submit unless you publish a share link yourself.

Contact

To delete your server-side data (newsletter email), POST to /api/delete-my-data with your email in the body. Your saved verdicts live in your browser and can be cleared from the history page or via your browser settings. Your saved verdicts live in your browser and can be cleared from the history page or via your browser settings. For other questions, removals, or complaints, open an issue at github.com/razel369/roast-my-page/issues.

Back to the verdict form