Where your information lives, and who can reach it.

Contact enquiries: name, work email, company, website, optional package interest, and what you wrote. Tool and download requests: email, optional name and company, the domain or asset requested, and the resulting score or answers. Measurement: campaign parameters, landing page, referring site, and aggregate page views.

We do not ask for payment card details, government identifiers, health information, or credentials anywhere on this site. Never send those to us by email either.

Submissions are written to a managed PostgreSQL database hosted in the United States. Data is encrypted in transit with TLS and encrypted at rest by the hosting provider. The site itself is served over HTTPS only.

Database rows are protected by row-level access rules, so records are readable only through authenticated Momentence staff accounts or the specific server-side function that created them. The public site cannot read the lead tables.

Momentence staff with a business need, signing in to our internal system with an individual account and a strong password. Access is role-based, removed when someone leaves, and reviewed when roles change. We do not grant client or vendor access to our lead records.

Site hosting and application platform, managed database and authentication, transactional email delivery, meeting scheduling, and Google Analytics through Google Tag Manager. Each acts on our instructions and only for the function it performs. We do not sell personal information or share it with advertisers.

Lead and enquiry records: kept while there is a plausible commercial conversation, and reviewed annually. Tool results and download requests: kept with the associated lead record. Aggregate analytics: retained by the analytics provider on its standard schedule. Server logs: short-lived, and used for troubleshooting and abuse prevention only.

The free analysis tool validates the domain you enter, refuses IP addresses and internal or private network hosts, checks every redirect it follows, times out slow requests, and applies per-address, per-email, per-domain, and site-wide rate limits. It reads only publicly available files and never signs in anywhere.

If we become aware of unauthorized access to information submitted through this site, we will investigate immediately, close the gap, and notify affected people by email with what happened, what was involved, and what we did about it, without unnecessary delay.

Email sales@momentence.com from the address in question and ask for a copy, a correction, or deletion of your details. We confirm in writing within four business days. You can also decline analytics at any time from the cookie preferences link in the footer.