Privacy Policy
We keep only what the service needs, we don't sell it, and scanning a domain collects nothing about that domain's owner. Here is exactly what that means.
Last updated 25 July 2026
What We Collect
We keep only what the service needs to work:
- Account email — if you create a free account, so we can sign you in and send verification or reset links.
- Every scan and its inputs — when you run a free scan or a Rank DNA report, we store what you entered (the domain, and for Rank DNA the category, market, city, and the keyword list), the scores it produced, and a link to the report. We keep these to improve the product and, if you have an account, to contact you about your results.
- Your scan history, linked to you — a scan you run while signed in is linked to your account. If you create an account later, we may connect scans you ran before signing up — matched by your browser session or a one-way hash of your address — and we label those links inferred, so it is clear they were not made while signed in.
- A one-way hash of your IP address — scan records store a salted hash of your address (not the address itself) for linkage and abuse control. Your raw address still appears in ordinary server logs, the way it does with any web server.
- Messages — if you write to us, or use a client message thread, we keep the thread.
- Server logs — the ordinary request logs (address, time, page) that any web server keeps.
What We Don't Do
We do not sell your data. We do not run advertising networks, and we do not embed third-party advertising or cross-site tracking cookies. We do no third-party identity resolution and no device fingerprinting — the only signals we use to connect your activity are your signed-in account, your session, and a one-way hash of your IP address. Our site uses a privacy-first, cookieless web-analytics measurement provided at our edge to count page views and performance — it sets no cookies and does not follow you across other sites.
Cookies
The marketing pages and the free scan set no cookies. When you sign in to a free account or the client portal, we set a single session cookie so you stay signed in. It is marked HttpOnly and SameSite=Strict, is scoped to the area you signed in to, and carries no tracking — it exists only to keep your session.
How Long We Keep It
We keep account data while your account is active, and we keep your saved reports so they stay available to you. Server logs rotate on an ordinary schedule. When you ask us to delete your account, we remove your account data and saved reports, keeping only what we must for security or legal reasons.
Deleting Your Data
You can ask us to delete your account and its data at any time. Email [email protected] from the address on the account, and we will confirm when it is done. Deleting your account removes the identity linkage from your scan records — your account, your session, and the hashed form of your address are cleared from them, so the records no longer point to you. The de-identified scan facts (the domain and inputs entered, the scores, and the time) remain in our aggregate corpus, which we use to improve the product; once de-identified, they can no longer be tied back to you.
Scanning Someone Else's Site
When you scan a domain, we collect nothing about that domain's owner. We read a public page and public records the way a browser or a search engine does — no login, no private data, nothing behind a wall. If you own a scanned site and want its public report unpublished, our Acceptable Use policy has the removal path.
Questions about privacy, or a deletion request? Email [email protected].