Terms, privacy and refunds
Last updated 6 August 2026 · Versão em português
1. Terms of service
What the service does
Cold Visitor sends automated agents to a website you specify. Each agent opens the site in a real Chromium browser, browses it as a first-time visitor would, and records what happened. You receive a report with a score, a funnel per visitor persona, prioritised findings and a video of each session.
You must be entitled to test the site
By submitting a URL you confirm that you own the site or are authorised to run automated tests against it. Testing a site you have no relationship with may breach that site's terms of use, and is your responsibility, not ours. We may require proof of ownership before running, and we refuse targets that are clearly not yours when we notice.
What the agents will and will not do
- They read pages, click links and buttons, and fill forms with obviously fake test data.
- They never submit payment details and never complete a purchase.
- They stop before any action that looks irreversible - deleting, cancelling, confirming an order - and the report records that they stopped.
- They respect a per-session budget and give up like a real visitor would, rather than crawling exhaustively.
Despite this, automated browsing carries residual risk. If your site has destructive actions behind ordinary-looking links, tell us before running, or do not run.
What we do not promise
The findings are produced by language models reading real session evidence. They are opinions about friction, not certified defects, and they can be wrong or incomplete. Nothing in a report is advice about accessibility compliance, security or law. You decide what to act on.
We do not guarantee uninterrupted service. A target site that is down, blocks automation or presents a CAPTCHA may produce a report with little or no useful content - see refunds below.
Acceptable use
Do not use the service to test sites you do not control, to overload a third party, to circumvent access controls, or to gather data about a competitor's site without permission. We may refuse or stop any job, and may block a domain or an address that abuses the free tier.
2. Privacy
This website sets no cookies
There is no analytics script, no advertising pixel and no cookie on these pages. Fonts and every other asset are served from this domain, so no request about your visit leaves it.
What we count, and how
We count visits on the server. For each page view we store the path, the language served, whether the address is Portuguese, the device class, and the referring domain. We do not store your IP address. To count distinct visitors within one day we store a one-way hash of the address combined with a secret and the date; because the date is part of the hash, the same address produces a different value tomorrow and cannot be followed across days.
Data from an audit
| What | Why | Kept for |
|---|---|---|
| Session videos, traces and network logs of the site you submitted | Evidence behind each finding | 7 days |
| The report itself, and the step events it is built from | So you can return to it | 30 days |
| Your email address, if you gave one | To send you the link when the report is ready | With the job, 30 days |
After those periods the files are deleted automatically. Report links are signed: they cannot be guessed, and they stop working when the report is purged.
Where it runs
The service runs on our own hardware in the European Union. Two processors are involved: the language-model provider that reads the session evidence, and the email relay that delivers the notification. Payments are handled by PayPal, which receives your payment details directly - we never see them.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted before the retention period ends. Write to the address below and we will act within 30 days. If you are unhappy with how we handle it, you may complain to the Portuguese data protection authority (CNPD).
3. Refunds
Paid audits are a one-off purchase, not a subscription. The price shown at checkout is the price charged.
When we refund in full, without asking
- The target site was down or unreachable, so the visitors never saw it.
- The target site blocked automation - a CAPTCHA, a bot wall, an access denial - and no session produced usable evidence. The system distinguishes these two cases from an ordinary visit and records which happened.
- Our own infrastructure failed and we could not deliver a report.
When we do not refund
- The report was delivered and you disagree with the findings. The findings are opinions; the evidence behind them is what you paid for and it is in the report.
- The score was worse than you hoped. That is the product working.
Right of withdrawal
Under EU consumer law you normally have 14 days to withdraw from a distance purchase. An audit is digital content produced on demand: by starting the job you ask us to begin immediately and you lose that right once the report is delivered. If you paid and the job has not started, tell us and we refund without question.
To ask for a refund, write to the address below with the report link or the payment reference. Refunds go back through PayPal to the account that paid.
4. Who we are
Cold Visitor is operated by João G. Ferreira, Portugal. Written enquiries, privacy requests and refund requests: hello@coldvisitor.com.
These terms are governed by Portuguese law.