Privacy
Privacy policy
What Schema Forge processes when you check a page, what it keeps, and what third parties are involved.
At a glance
Schema Forge processes the URL you submit and the page it fetches, and keeps neither. It uses no cookies and no analytics, and holds your IP address in memory for a few minutes to enforce a rate limit. If you turn on page alerts it also keeps your browser’s notification address and the pages you chose to watch, until you remove them.
What is processed
The URL you enter is sent to the server, which downloads that page, analyses its HTML and returns the result. The page content and the generated markup are not written to disk or to a database.
If you paste a page’s HTML, it is sent to the server, analysed in memory and not stored. The same goes for the llms.txt builder, which downloads your sitemap and pages, builds the file and keeps nothing.
A site scan downloads the sitemap and up to 10 pages from the same site, one batch at a time, and returns a table. Nothing is stored. When JavaScript rendering is enabled, the page is opened in a headless browser on the server and discarded afterwards.
What is kept
The server keeps request timestamps against your IP address in memory, for at most ten minutes, to limit each address to 30 requests and 3 scans a minute. Error messages may be written to server logs without page content.
Page alerts
If you turn on an alert, the server stores, in a database hosted by Supabase, the notification address your browser gives it (a web address from your browser’s push service, plus two keys used to encrypt messages to you), the page addresses you chose to watch, and for each a short summary: which schema types it had, how many errors, when it was last checked, and the last ten changes found. It uses these only to re-check the pages and send you notifications.
An alert ends after 90 days, when you remove it on the alerts page, or when your browser’s push service says the address is no longer valid. Messages are encrypted for your browser. The push service (for example Google, Mozilla, Apple or Microsoft) can see that a message was sent to your browser, but not what it says, and receives a contact address for the site’s operator with each message.
Cookies and storage
The site sets no cookies and runs no analytics or advertising scripts. So that it can work offline, a service worker keeps a copy of the site’s own pages and files in your browser’s cache, and a notification subscription is kept there if you turn on alerts. The generator also remembers the last few addresses you checked, in your browser only, so you can run them again. They are never sent anywhere except when you run them, and the Clear button removes them. Clearing the site’s data in your browser removes all of this.
Third parties
Fonts are loaded from Google Fonts, so your browser contacts Google when a page loads. When you press "Test in Google" you leave this site for Google's Rich Results Test. Push notifications travel through your browser’s push service, and alerts are kept in a database hosted by Supabase.
Only submit public pages. Pages behind a login cannot be read, and addresses on private networks are refused.
Contact
To ask for permission, report a problem or raise a question, contact the operator of this site in writing.