Privacy Policy

What we collect

• Scanned URLs and results. When you submit a page for analysis we fetch it, store the URL and the resulting report, and keep them so the report can be viewed again at its link. Reports are not listed publicly, but anyone with the link can open the free report.
• Rate-limiting data. To limit free scans per day we store a salted, one-way hash of your IP address alongside each scan. The hash cannot be turned back into your IP address.
• Account data. If you create an account we store your email address and, for Google sign-in, the identifier Google provides. Passwords are handled by our authentication provider (Supabase) and are never visible to us.
• Payment data. When paid reports are enabled, payments are processed by Stripe. We receive a payment reference and status, never your card details.
• Server logs. Our hosting provider (Netlify) records standard HTTP access logs — IP address, user agent, referrer and the page requested — for security and operational purposes.
• Analytics. If you consent to analytics cookies, we use Google Analytics 4 to understand which pages are used. Without your consent Google Analytics runs in a consent-denied mode that sets no analytics cookies.
• Preferences. Your cookie-consent choice is stored in your browser’s local storage so we don’t have to ask on every visit.

Cookies and similar technologies

Our cookie-consent banner lets you accept or decline non-essential cookies. Essential storage — the session cookie that keeps you signed in and the record of your consent choice — is always on; we cannot give you a choice without a way to remember it.

You can change your preference at any time from the “Cookie settings” link in the footer.

Third-party services

We rely on Supabase (authentication and database, EU region), Netlify (hosting), Google (sign-in, analytics and the PageSpeed Insights measurements shown in paid reports) and Stripe (payments). Each processes data under its own privacy policy. When a report links to the page you scanned or to external resources, the destination site’s policy applies.

Your rights

Depending on where you live, you may have rights under regulations such as the EU GDPR or California CCPA, including the right to access, correct, delete, or object to the processing of your personal data. To exercise them — including deleting your account and the scans linked to it — email info@seoflag.com.

Children’s privacy

SEOFlag is intended for a general adult audience. We do not knowingly collect information from children under 13 (or under 16 where that is the applicable threshold).

Changes to this policy

We will update this page when our practices change. Material changes are noted at the top of this page.

Contact

Questions about this policy: info@seoflag.com · See also our Terms of Use.