Skip to content
SEO Rapor
EN
Documentation

Privacy and data

What data is stored and who it is shared with.

This page is a short summary of the privacy notice. The binding text is the Privacy notice (incl. KVKK, the Turkish data protection law).

#What data is processed?

  • Account data: name, e-mail address and a one-way hash of the password (the password itself is not stored).
  • Session and security data: session duration, IP address and browser information; sign-in and registration attempts. For security and to prevent abuse.
  • Order data: the pack purchased and the payment status. Your card details do not reach us; Paddle takes the payment.
  • Service data: the domains you add, verification records, crawl results and your token transactions.
  • Announcement consent: if you choose "Notify me", your e-mail address, the time of consent and the version of the consent text shown. You can withdraw consent with one click using the link in every such e-mail.
  • Preview record: so that the free preview is not used again, the normalized form of your e-mail address and the crawled domain. It remains even if you delete your account.

#Who can access your reports?

Only our authorized staff; read-only, for support, quality control and reviewing the errors you report. Reports that contain errors may be put into this review automatically to check their accuracy. Views are logged (opening the same report again within an hour counts as one record).

#Who is it shared with?

Your data is not sold and is not shared for advertising. To provide the service, and only to the extent necessary, it is transferred to the payment infrastructure (Paddle), e-mail delivery (Resend), hosting and database (Hetzner, Germany), support e-mail (Hostinger), Anthropic if the report commentary feature is switched on (only a summary of findings and example addresses) and Google PageSpeed Insights for speed measurement (the addresses of the pages measured).

#How long is it kept?

Your account data is kept while your account is open. You can delete your account yourself on the Account page of the dashboard; your account, sites and crawls are then deleted immediately (if you have a payment record, only the anonymous payment record remains, as the law requires; the preview record also remains). Session records are deleted when the session ends, sign-in attempt records after 90 days; backups are deleted in rotation within 30 days at the latest. The full table is in the privacy notice.

#Cookies

A session cookie (at most 30 days), a language cookie (1 year) and browser storage entries for the theme, the chosen package and the panel menu are used. No advertising or tracking cookies are used. On the Pricing and Tokens pages Paddle's checkout script is loaded; Paddle may set a short-lived security cookie on its own domain.

#Visit statistics and error logging

Visits are counted with a cookieless tool (Umami) running on our own server; your IP address is not recorded and site names in panel addresses are not sent. Technical errors are logged with an error logging tool (Bugsink), also on our own server; user details, e-mail addresses and crawled site addresses are removed before anything is logged.

#Sites we crawl

The crawler bot identifies itself, follows the robots.txt rules and sends requests to the site at a polite speed. It reads only publicly accessible pages; it does not store the full text of pages, only the technical fields needed for SEO analysis (such as title, meta description, status code and links). Site owners can block the crawl: Crawler bot.

#Your rights

You can find your rights under Article 11 of the KVKK (to learn whether your data is processed, to request correction or deletion, to object) and the way to apply in the privacy notice.