Skip to content

Terms · updated 27 September 2026

Use it sensibly, and most of this never matters.

Plain language, and accurate about a product that deletes your report the moment it reaches you. Nothing on this site is sold: the scanner is free, and client work runs under an agreement we sign with you.

Who these terms are with

the basics

“We” and “us” mean Smart Capture Studio, the operator of smartcapturestudio.com and the scanner behind it. “You” means whoever is using it — with or without an account, from a browser or from an API key.

Using the scanner means accepting these terms. If you are using it for an employer or a client, you are confirming you may accept them on that organisation’s behalf.

These terms cover the scanner, this website, the API and any account. They sit alongside the privacy policy, which covers what is stored and for how long.

The short version

5 rules
rule 1

Only scan sites you own or are allowed to scan

The single rule that matters most, and the one below with a section of its own. Point the scanner at your own sites, your clients’ sites, or sites whose operator has agreed. Not at infrastructure you have no business probing, and never as one step in an attempt to break into something.
rule 2

Stay inside your limits

Five scans an hour on the free plan — per IP address signed out, per person signed in — and whatever your plan says if you have one. Do not route around a limit with proxies, extra accounts or scripts. If you genuinely need more, ask — that is cheaper for both of us than an arms race.
rule 3

Do not resell the scanner as your own product

Use a report however you like for your own work or your clients’ work, including publishing it, quoting it and charging for the work around it. Do not wrap the scanner itself in a service of your own, and do not use the API to build something that competes with it.
rule 4

Do not attack the service

No attempts to overload, disrupt, reverse engineer, or gain unauthorised access to the scanner, the API or the machines they run on. No automated scraping of this website.
rule 5

Look after your own key

An API key is a password. It is shown once, we cannot show it again, and anything done with it counts as done by you until you revoke it — which takes one click on your account page.

Scanning a site you do not own

read this one

You confirm, every time you run a scan, that you own the site or have the operator’s permission to scan it. We have no way to verify that and we do not try to. It is the one thing we genuinely rely on you for.

What the scanner does is deliberately modest: it requests pages the way a browser would, identifies itself in its user agent, follows only same-origin links, stays inside a fixed page and time budget, and does not attempt to log in, submit forms, or reach anything an ordinary visitor could not. That is a design choice, not a legal defence — in some places, scanning somebody else’s systems without permission is unlawful regardless of how politely it is done, and that is your responsibility rather than ours.

The same goes, more so, for an uptime monitor: it requests its address every few minutes for as long as it exists, so only point one at a site or an API you run or are allowed to watch.

The site audit on a paid plan goes further than the scanner, so the permission you need is wider: it crawls a whole site, up to your plan’s number of pages, can open pages in a browser, can ignore robots.txt if you tell it to, and can sign in with a login you give it. Only audit a site you run or are allowed to test in that way; use a login made for the purpose, with read-only access; and, if the site has a firewall or a host that limits crawling, tell them first. The same applies to pages you watch for changes and to pages you measure for speed.

Real-user measurement asks you to put our snippet on your site. If you do, you are the one telling your visitors about it: it sets no cookie and collects no personal data (see the privacy notice), but your own privacy notice should say that page timings are measured.

AI crawler analytics asks you to send us your own site’s requests (through a Worker, a log drain or an uploaded access log). Those requests include your visitors’ IP addresses and browser details. Send them only for sites you run and only where you are allowed to; we process them on your behalf and only to count AI bots and visits from AI assistants, and we keep no IP address, browser string or query string (see the privacy notice). Your own privacy notice should say that request logs are shared with a service provider for analytics.

Connecting Google Search Console or Analytics gives us read-only access to the properties you choose. Connect only properties you are allowed to share with us; disconnecting withdraws the access and deletes what we copied.

If you operate a site and want it excluded from the scanner, write to [email protected] and we will block it.

Accounts and keys

if you have one
optional

The scan needs no account, and accounts are by invitation

The free scan needs no account and always will. Accounts are for clients: we invite you, you complete a short registration, and we open the account once we have reviewed it. Signing in adds score history that follows you between devices, and is what paid features attach to.
you

You are responsible for what happens under your account

Sign-in is a link sent to your email address, so your email account is effectively the password. Keep it secure, and tell us if you think somebody else has been using yours.
keys

API keys are shown once and stored only as a hash

We cannot recover a key for you, because we do not have it — what we store is a one-way hash. If you lose one, delete it and make another. Treat a key like a password: not in a public repo, not in a client-side bundle, not in a screenshot.
age

You must be old enough to enter a contract

The scanner is a tool for people who run websites. It is not intended for children, and we do not knowingly create accounts for anyone under 16.
us

We can suspend an account that is breaking these terms

Usually after asking. Immediately, and without notice, if something is actively harming the service or someone else — and we will tell you why afterwards.

Working with us

two different things
free

The scanner is free, and needs nothing from you

Scan a site, read the report, export it, embed the badge. No card, no account required, five scans an hour. It is offered as it is, and the warranty and liability sections below are the whole of what we promise about it.
engagement

Client work runs under a separate written agreement

We are not a subscription. There is no checkout on this site and nothing here charges money. Paid capability — monitoring, the bigger crawl, the API, alerts — is switched on for a client we have agreed an engagement with, and the terms of that engagement are in the agreement we both sign: the fee, what it covers, how long it runs, what notice either of us gives, and which law governs it.
wins

That agreement wins where it disagrees with this page

These terms cover the free scanner and your use of this website. Where a signed engagement says something different, the engagement is what applies between us. Nothing on this page reduces what we have agreed with you in writing.
ends

An engagement ends on its date unless we extend it

It does not renew itself, and there is nothing to cancel: the date is the date, and extending it is a conversation and a signature. Paid capability stops when it passes.
after

What ending an engagement does to your data

Paid features stop; your data is not deleted as a punishment. Watched sites stop being re-scanned but stay listed, kept reports stay where they are until you delete them, and API keys stop working until an engagement resumes — they are not revoked, so starting again does not mean redeploying your CI secrets. Uptime monitors stop being checked and your status pages stop being shown, but both keep their settings and history, and pick up where they left off if the engagement resumes.

Who owns what

clear lines
yours

Your sites and your reports are yours

We claim nothing in the sites you scan or the findings about them. A report is yours to use, publish, edit, send to a client and charge for. We do not need a licence to any of it, because we delete it — a report is erased the moment it reaches your browser.
ours

The scanner, the checks and this site are ours

The code, the check corpus, the scoring model and the writing on this site remain ours. Using the product does not transfer any of it, and rule 3 above is the practical edge of that line.
shared

A shared report is public to whoever holds the link

Pressing Share creates a copy anyone with the link can read for 30 days. That is the point of it, and it is the only thing you can do that puts a report on our servers on purpose. Do not share a report about a site whose owner would object.
feedback

If you send us feedback, we can act on it

Telling us a check is wrong is the most useful message we get. We may use what you tell us to improve the product without owing you anything for it. That does not give us rights to your confidential information or your site.

What we promise

not much

The scanner is provided as it is, with no warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose or non-infringement. A score is the output of a fixed set of automated checks running once, against the entered page and up to a handful more, in about a minute. It is a useful signal and it is not an audit, a certification, or a substitute for someone who knows your system.

A clean report does not mean a site is secure, fast, accessible or correct. It means these particular checks found nothing. Do not make a decision that matters on the strength of a number from an automated tool — ours included.

We do not promise availability, and we publish no service level. The scan API runs on a small instance that is allowed to sleep when idle, so the first scan after a quiet period is slow on purpose. A report is deleted from the server as soon as it reaches you, so treat a report link as temporary and keep your own copy of anything you need.

Uptime monitoring is a measurement, not a guarantee. We check on a schedule and confirm a failure from more than one place before alerting, so a single check can be missed, a short outage can fall between checks, and an alert can arrive late or, if email or your channel fails, not at all. The uptime figures we report are what our checkers saw, not a service level we give you or one you can hold your own provider to. Do not make it the only thing watching something that must not go down.

AI visibility shows what the assistants said, not what they will say. Your questions are sent to the AI assistants you chose (Anthropic, OpenAI, Google, Perplexity), and each answer is recorded as it came back. Answers change from one run to the next and can be wrong; we report whether you were named and cited in them, and do not vouch for their content.

Some of what a report contains comes from third parties — Google’s PageSpeed Insights and Chrome UX Report, and public DNS. When one of them is slow, wrong or unavailable, those checks are skipped rather than failed, and the rest of the report still stands. We are not responsible for their output.

Accuracy, mistakes and liability

wrong

Checks can be wrong

A check can misread a page, time out on a slow network, or flag something that is correct in context. If one does, tell us — it is the most useful message we get, and it is how the corpus improves.
cap

What we are liable for, and up to how much

To the fullest extent the law allows: we are not liable for indirect, incidental, special or consequential loss, for lost profits, revenue, goodwill or data, or for anything arising from reliance on a report. Our total liability for any claim is capped at the greater of the amount you paid us in the twelve months before it arose, or US$100 — which, on a free plan, is US$100.
never

Nothing here excludes what cannot be excluded

No part of this page limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be excluded where you live.
yours

You cover us for what you point the scanner at

If someone brings a claim against us because of a site you scanned without permission, content you shared, or your breach of these terms, you agree to cover the reasonable cost of dealing with it. We will tell you promptly and let you run the defence if you want to.

Ending it

either side
you

You can stop at any time

Close the tab, or delete your account from the account page. Deleting an account deletes your history, your watched sites, your kept reports and your API keys with it.
us

We can stop too

We can suspend or close an account that breaks these terms, and we can discontinue the service entirely. If we shut the service down we will give at least 30 days’ notice to anyone with an account. If you are a client at the time, what you are owed for the unused part of your engagement is whatever your agreement says — that is the sort of thing an engagement covers and this page does not.
after

What survives

The sections on ownership, warranties, liability, indemnity and governing law keep applying after an account ends, because that is when they matter.

Wherever you are

worldwide

The scanner is used from everywhere, and nothing on this page takes away a right your local law gives you and does not allow to be signed away. If you are a consumer in the UK, the EU, Australia, India or anywhere with mandatory consumer protections, those apply on top of these terms and win wherever the two disagree. The free scanner is the only thing this page offers you, and it offers it for nothing.

Governing law is not yet stated on this page. Until it is, nothing here is intended to affect which law or which courts would otherwise apply to a dispute between us.

If a part of these terms turns out to be unenforceable, the rest carries on. Not enforcing something once does not waive it. You may not transfer your rights under these terms; we may transfer ours if the product changes hands, and would say so first. Neither of us is responsible for failures caused by something genuinely outside our control.

Changes and questions

These terms can change. The date at the top of this page moves when they do, and a material change — anything affecting price, your rights, or what you are allowed to do — gets at least 30 days’ notice by email to anyone with an account. Continuing to use the scanner after a change means you accept it.

Questions go to [email protected], and we answer them ourselves.