Privacy and data
What data is stored and who it is shared with.
This page is a short summary of the privacy notice. The binding text is the Privacy notice (incl. KVKK, the Turkish data protection law).
#What data is processed?
- Account data: name, e-mail address and a one-way hash of the password (the password itself is not stored).
- Session and security data: session duration, IP address and browser information; sign-in and registration attempts. For security and to prevent abuse.
- Order data: the pack purchased and the payment status. Your card details do not reach us; Paddle takes the payment.
- Service data: the domains you add, verification records, crawl results and your token transactions.
- Announcement consent: if you choose "Notify me", your e-mail address, the time of consent and the version of the consent text shown. You can withdraw consent with one click using the link in every such e-mail.
#Who can access your reports?
Only our authorized staff; read-only, for support, quality control and reviewing the errors you report. Every view is logged.
#Who is it shared with?
Your data is not sold and is not shared for advertising. To provide the service, and only to the extent necessary, it is transferred to the payment infrastructure (Paddle), e-mail delivery (Resend), hosting and database (Hetzner, Germany), Anthropic if the report commentary feature is switched on (only a summary of findings and example addresses) and Google PageSpeed Insights for speed measurement (the addresses of the pages measured).
#How long is it kept?
Your account data is kept while your account is open. You can delete your account yourself on the Account page of the dashboard; your account, sites and crawls are then deleted immediately (if you have a payment record, only the anonymous payment record remains, as the law requires). Session records are deleted when the session ends, sign-in attempt records after 90 days; backups are deleted in rotation within 30 days at the latest. The full table is in the privacy notice.
#Cookies
Only one cookie needed to keep your session going and a browser record that holds your theme preference are used. No advertising or tracking cookies are used.
#Sites we crawl
The crawler bot identifies itself, follows the robots.txt rules and sends requests to the site at a polite speed. It reads only publicly accessible pages; it does not store the full text of pages, only the technical fields needed for SEO analysis (such as title, meta description, status code and links). Site owners can block the crawl: Crawler bot.
#Your rights
You can find your rights under Article 11 of the KVKK (to learn whether your data is processed, to request correction or deletion, to object) and the way to apply in the privacy notice.