Privacy

The data controller is [registered company name] of [registered address]. Questions about this policy, or about data we hold, go to [data protection contact].

Agencies give us an email address and a name to hold an account, the domains and keywords they want tracked, and — where they connect them — credentials for their own Google, Bing and vendor accounts. Those credentials are encrypted before storage and are used only to read the data the agency asked us to read.

We also store what we find publicly: pages our crawler fetched, links between them, and search results we captured. None of that is personal data about our users; it is a record of what public web pages said.

Our lawful basis is performance of a contract — we cannot provide the service without it. Account data is kept while the account is open and for [retention period] after it closes.

The SEO extension collects nothing unless you are asked and say yes. It is an SEO tool first: the page audit, the response headers, the performance figures and the results overlay all work identically whether you agree, refuse, or never answer, and refusing removes nothing.

If you do agree, it contributes anonymous search data — and only from a search results page. It has no permission to observe any other page, so there is no browsing history for it to collect and none is collected. This is a smaller disclosure than the research panel below, and agreeing to one is not agreeing to the other.

What is collected

• What you searched for, on Google, Bing and DuckDuckGo only
• The hour of the search, never the minute or second
• Which search result you clicked, and where it appeared in the list

What is never collected

• Any page outside a search engine — this extension cannot see them
• Anything you type outside a search box
• Searches on banking, health, dating and adult sites
• Searches about health, beliefs, politics or sexuality
• Your name, your account, or anything that identifies you

As with the panel, contributors are identified by a random value tied to nothing about them and replaced every thirty days, so that one person searching repeatedly is not counted as many people. Stopping deletes it along with anything not yet sent, so a later return cannot be joined to what came before.

Our lawful basis here is consent, withdrawable at any time in the extension's own settings. Records are deleted after thirteen months.

This is the separate Seolytical Web Panel extension, and it collects considerably more than the SEO extension above: it measures which websites people visit, so we can report how much traffic sites receive. Joining is entirely voluntary, nothing is collected before someone agrees, and leaving takes effect at once.

What is collected

• The address of pages you visit, without anything after the ? or #
• The site you arrived from, as a name only — not the full address
• The hour of the visit, never the minute or second
• How long you stayed on a page, as a length of time
• Which pages you read in the same sitting, forgotten after half an hour
• Which search result you clicked, and where it appeared in the list

What is never collected

• Anything you type, including searches and form fields
• Pages on private or internal networks
• Banking, health, dating and adult sites
• The page itself on any address about health, beliefs, politics or sexuality — only the site name
• Any site you add to your blocked list

Panel members are identified by a random value that is tied to nothing about them and is replaced every thirty days. It exists only so that one person visiting a site repeatedly is not counted as many people. Leaving the panel deletes it along with anything not yet sent, so a later return cannot be joined to what came before.

Our lawful basis here is consent, and consent can be withdrawn at any time from the extension itself. Panel records are deleted after thirteen months.

We use [hosting provider] to run the service and [list of sub-processors] to support it. Agencies’ vendor credentials are used only against those vendors. We do not sell personal data, and panel records are only ever reported in aggregate — never as one person’s browsing.

You may ask for a copy of what we hold about you, ask us to correct or delete it, ask us to restrict how we use it, ask for it in a portable form, and object to our using it. Where we rely on consent you may withdraw it at any time without giving a reason, and doing so does not affect what was lawful before.

Write to [data protection contact]. If you are unhappy with our response you may complain to [supervisory authority].

If we change what the panel collects, existing consent stops applying and members are asked again rather than carried over. Other changes to this policy are posted here with a new date.

Last updated [date].