Privacy policy

The free audit (instant report)

• The URL you enter. This is normally the address of a company website and is not in itself personal information.
• The report we build from it, and the data behind it, assembled from publicly available information and from the search and AI-answer data we buy.
• Technical information used to limit how often one requester can run reports. We do not store the address the request came from; we keep only a one-way hash of it, which cannot be reversed.

The free audit uses no cookie. The limit on how often reports can be requested is applied to a one-way hash of the address a request came from, made with a secret key we hold and not reversible; we do not store the address itself. If requests from one address keep arriving in quick succession after its limit is reached, on three consecutive days, we stop accepting requests from that address for 30 days. For that alone we keep a similar hash, with no date in it, only while the decision and the block last (retention is in Article 4).

So that you can open your own reports again, the site keeps their links, the domain and the time, up to twenty, in your browser's own storage (local storage). They are never sent to us, and you can clear them from the page at any time.

The free audit involves no cookie, no account, no login, no email address, no analytics identifier, no third-party script and no identification by combining the characteristics of your device.

Requesting the full report

• Your name, your company and your work email address. We use them for two purposes and no others: to deliver the report you asked for and contact you about it, and to contact you about our services. We do not provide or sell them to anyone. Inside our company the people who contact you may hold them for that purpose, and a deletion request reaches that copy too. They do not appear in the report itself or in the PDF; they are held separately as the record of your request. You can ask us to stop the contact and to delete them at any time. (Terms terms-v1.1 (2026-09-21).)

• The report and the data behind it: kept, without a fixed period, as our own record, inside our environment in the Japan region. We treat it as confidential and show it only to the person who asked for it. We do not publish it, do not list it anywhere, do not allow search engines to index it, and do not provide or sell it to anyone else. Send us the link to the report and we will delete it and confirm when it is done. If you no longer have the link, we will take the request in a way we can verify; we will not tell anyone who cannot show the link whether a report exists for a given domain.
• The per-domain cache: 24 hours, so that asking twice in one day does not fetch the site twice.
• The hashes used for rate limiting: only the current day's are kept, and they are deleted at the first request after the day ends. The hash with no date in it, used to decide and enforce a 30-day block on repeated misuse, is deleted at the first request after that decision and block end, which is 33 days at most.
• Your name, company and email: kept while your request is open and for the contact purpose above. Ask us to stop or to delete them and we do both.
• What we send outside: we buy search and AI-answer data from DataForSEO OÜ (Estonia). We send them the domain you entered and search terms only; we do not provide them with personal information. Under their own policy they keep API task data for 365 days and publish no procedure for deleting it sooner. So our deletion ends our copy, not theirs.