Privacy Policy

Last updated: 6 September 2026

1. About this Privacy Policy

This Privacy Policy explains how I, operating Sitealyser, collect, use, store, and protect personal information when you visit the website, create an account, purchase paid access, or use the SEO tools (the "Service").

I act as the data controller for the personal information described in this policy, except where another organisation independently determines how and why your information is processed.

I aim to handle personal information in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018, as applicable.

2. Information I collect

Depending on how you use the Service, I may collect the following categories of information.

Account information

  • Email address
  • Supabase account identifier
  • Account creation information
  • Password-related authentication information handled by our authentication provider

SEO tool information

  • URLs submitted for analysis
  • Optional target keywords submitted for analysis
  • Information generated while processing an SEO analysis
  • Scan usage information

Submitted URLs and analysis inputs are processed to provide the requested analysis. I do not intend to permanently store submitted URLs or complete SEO analysis results as part of your account unless the Service specifically states otherwise.

Purchase information

If you purchase paid access, I may maintain records including:

  • The access plan purchased
  • Purchase amount and currency
  • Payment status
  • Purchase date
  • Access start and end times
  • Stripe payment or checkout identifiers
  • The account identifier associated with the purchase, where applicable

I do not store your full payment card details.

Technical and security information

I may collect or process information such as:

  • IP address
  • Browser type and version
  • Device information
  • Operating system information
  • Pages visited
  • Request information
  • Usage and scan activity
  • Security and error information
  • Information used to apply technical rate limits and prevent abuse

Communications

If you contact me, I may process your email address, message, and any other information you choose to provide.

3. How I use personal information

I may use personal information to:

  • Provide and operate the Service
  • Create and manage user accounts
  • Authenticate users
  • Record and manage scan usage and access eligibility
  • Record and manage paid access
  • Process and reconcile purchases
  • Provide customer support
  • Prevent fraud, abuse, and unauthorised access
  • Apply rate limits and technical protections
  • Monitor service reliability and performance
  • Investigate errors and security incidents
  • Comply with legal and regulatory obligations
  • Improve the website and SEO tools
  • Analyse aggregate website usage where appropriate

4. Lawful bases for processing

Depending on the circumstances, I rely on one or more of the following lawful bases under UK data protection law:

  • Contract: where processing is necessary to provide an account, paid access, or another service requested by you.
  • Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.
  • Legitimate interests: where processing is necessary for purposes such as security, fraud prevention, abuse prevention, service reliability, administration, and improving the Service, provided those interests are not overridden by your rights and interests.
  • Consent: where applicable, including where consent is required for non-essential cookies, analytics, advertising, or other processing.

5. SEO URL and keyword processing

When you submit a URL and optional keyword to an SEO tool, the Service may request and process publicly accessible page content in order to perform the requested analysis.

The submitted URL is not necessarily a URL belonging to you. You are responsible for ensuring that your use of the Service complies with our Acceptable Use Policy and any applicable restrictions relating to the website being analysed.

Submitted URLs and analysis inputs are processed transiently for the purpose of generating the requested analysis. I do not intend to permanently store submitted URLs or complete analysis results after processing unless a particular feature expressly provides for storage.

6. Accounts and authentication

User accounts are managed using Supabase authentication services.

Your email address and account identifier are used to authenticate you, maintain your account, provide account functionality, and associate your account with relevant Service records.

Passwords are handled through the authentication system and are not intended to be accessible to me in plain text.

When you register for an account, you must confirm your email address. If you do not confirm your email address within 24 hours of starting the registration process, your unconfirmed account will be automatically deleted.

7. Payments

Payments are processed through Stripe.

Stripe may process payment information necessary to complete transactions, prevent fraud, and provide payment services.

I may receive or retain transaction identifiers and purchase information necessary to determine whether a payment succeeded and to provide the corresponding access.

Stripe's own privacy documentation governs information that Stripe processes as an independent controller where applicable.

8. Purchase records after account deletion

You can delete your account through the account functionality provided by the Service.

When an account is deleted, personal account data associated with that account is deleted where appropriate. However, purchase and transaction records may need to be retained for accounting, financial, fraud-prevention, dispute-resolution, security, or legal purposes.

Where your user account is deleted, the account identifier associated with historical purchase records may be removed or disconnected from the deleted account while the transaction record itself is retained.

9. Data retention

I retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Different categories of information may have different retention periods.

  • Account information: generally retained while your account remains active and deleted or anonymised where appropriate after account deletion. Unconfirmed accounts are automatically deleted if the email address is not confirmed within 24 hours of registration.
  • Submitted SEO URLs and analysis inputs: intended to be processed transiently and not permanently retained as account data.
  • Purchase and transaction records: retained for as long as reasonably necessary for accounting, legal, tax, fraud prevention, disputes, and related purposes.
  • Security, rate-limiting, and technical logs: retained for as long as reasonably necessary to maintain security, enforce rate limits, investigate abuse, investigate errors, and maintain service reliability.
  • Analytics information: retained according to the settings and retention controls of the applicable analytics service.

10. Who I share information with

I may share or make personal information available to service providers where necessary to operate the Service.

These may include providers for:

  • Supabase, for authentication, account management, and database infrastructure
  • Stripe, for payment processing and related transaction services
  • Google Analytics, for website analytics where consent has been provided
  • Upstash, for technical rate limiting and abuse prevention
  • Hosting and infrastructure providers
  • Security and abuse-prevention providers
  • Email or customer-support providers, where used

I may also disclose information where required by law, legal process, court order, or to protect the rights, property, security, or users of the Service.

11. International transfers

Some third-party service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, I will rely on an appropriate lawful transfer mechanism where required, such as an adequacy regulation or appropriate contractual safeguards.

12. Analytics

I use Google Analytics to understand how visitors use the website and to help improve the performance, usability, and reliability of the Service.

Google Analytics may collect information such as pages visited, interactions with the website, device and browser information, and other usage information.

Google Analytics is a non-essential analytics technology. Where consent is required by applicable law, it will only be activated after you have provided the required consent.

13. Cookies

The website uses cookies and similar technologies. Some are strictly necessary for the Service, while others may be used for analytics or advertising.

Please see the Cookie Policy for further information about the technologies used and how to manage your preferences.

14. Your data protection rights

Subject to applicable legal conditions and exemptions, you may have rights including:

  • The right to access your personal information
  • The right to request correction of inaccurate information
  • The right to request erasure
  • The right to request restriction of processing
  • The right to object to certain processing
  • The right to data portability in applicable circumstances
  • The right to withdraw consent where processing relies on consent

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a data protection right, contact: sitealyser@outlook.com

15. Complaints

If you have concerns about how your personal information is handled, please contact me first so that I can investigate the issue.

You also have the right to complain to the UK's Information Commissioner's Office (ICO).

16. Changes to this Privacy Policy

I may update this Privacy Policy when the Service, the information I process, or applicable legal requirements change.

The latest version will be published on this page with its revision date.

17. Contact

For privacy questions, data protection requests, or concerns about the use of your personal information, contact: sitealyser@outlook.com