Privacy: Website Compliance MCP
Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance.
Last updated: 2026-10-27. Agent Harbor LLC, 3850 Kitsap Way, Ste 104 #1087, Bremerton, WA 98312. Questions: brian@agentharbor.agency.
This is the privacy notice for Website Compliance MCP. It sits under the Agent Harbor privacy policy, which covers the rest of this site. The server is not published yet; this page describes how it will handle data and applies from the day it is.
What the server receives
The tool arguments you send (the page address to check, your authorization statement, an optional idempotency key, options) and what Apify's gateway forwards. Apify authenticates you and removes your token before the request reaches us; the server never sees, logs or stores your Apify token.
What it keeps, and for how long
For each call it stores, in a key-value store of the Actor run on Apify, a job record (the tool, a hash of the arguments, your address with query values removed, the result and timestamps) and the full report from the scanner. Results are served for 24 hours and then treated as expired. Expired records are removed only when they are next read, so records can remain in that store until it is cleaned out; a clean-up job is planned and does not exist yet, so treat stored data as kept until deleted. The full report may contain the full web addresses of the requests the scanner observed, including query strings; redaction of those is not finished. The idempotency key is hashed in storage keys. No cookie values are stored (only lengths and short hashes). Screenshots are not stored by this version.
What it fetches
Only the page you name and, for the PDF and crawler-policy tools, files on the same host such as robots.txt, a sitemap, llms.txt and PDFs. Requests carry an honest user agent that identifies Agent Harbor and links to a page with an opt-out. It does not log in, solve CAPTCHAs or work around bot protection.
Who processes it
Apify (hosting, authentication, billing). Agent Harbor LLC operates the server. Nothing is sold or shared for advertising, and we do not publish or market findings about a named third-party site.
Your responsibility
You confirm on every call that you own the site or are authorized by its owner to test it.
Your choices
Ask us to delete a result, a waitlist address or anything else we hold about you: write to brian@agentharbor.agency. Because the free checker needs no account, tell us the page address and the time (UTC) you ran it.
The waitlist
If you e-mail us to join a waitlist we keep your address and your message to tell you about this product, and delete them when you ask. We do not add you to anything else.
Changes
We will change this page before anything it describes changes, and update the date above.