Privacy Policy

Last updated: October 17, 2026

Overview

seoscore.tools is built privacy-first: no signup, no email gate, no personal account required. We do collect a small amount of operational data — scan results are stored as publicly shareable reports for 90 days, anonymous analytics are collected via Google Analytics 4, and IP addresses are used for short-window rate limiting. This page lists exactly what is stored, where, and for how long. If something here is unclear, email us — we believe an SEO tool that scores E-E-A-T should be honest about its own data handling.

Data We Do NOT Collect

• We do not require signup, email, or any personal account
• We do not set our own tracking cookies. Google Analytics and the Impact.com script (see Third-Party Services) may set cookies of their own
• We do not sell your data. Some data is processed by the third-party services listed below
• We do not persist your browsing behavior across sessions on our own systems
• We do not use the URL you scan for any purpose other than running the scan and producing the public report (the URL is also sent to Google PageSpeed Insights, see below)

Data We DO Store

To be fully transparent — here is everything that gets stored when you use the tool:

• Public scan reports (90 days): Each scan generates a public report at seoscore.tools/report/{domain-slug}/ that contains the scanned URL, the SEO / AEO / GEO scores, and the list of check results. Anyone with the report URL can view it. Reports are designed to be shareable. Reports auto-expire after 90 days. Contact us if you want a specific report deleted sooner.
• Rate-limit counters (2 minutes to about a day): To prevent abuse, your IP address is part of short-lived counter keys in Cloudflare's key-value store. The IP address is stored as is, not hashed. The counters are: 5 scans per IP per minute (expires after 2 minutes), 3 citation reports per IP per 10 minutes (expires after 11 minutes), and a daily limit per IP for the AI visibility check (expires after about 25 hours). A separate counter limits scans per target domain (30 per hour, expires after 2 hours); it contains the scanned domain, not your IP address. Your IP address is not retained by these counters beyond those windows.
• Total scan counter: A single global integer ("total scans performed") is incremented by 1 each time anyone runs a scan. This is just a number — not tied to any IP, URL, or session.
• Cloudflare access logs: Like any web service, Cloudflare retains short-term server logs (IP, user-agent, request path, timestamp) for security and debugging. These are governed by Cloudflare's own privacy policy and are not accessible to us beyond aggregated dashboards.

How Scans Work

When you scan a website, our Cloudflare Worker fetches the page from the edge, runs 260+ checks in parallel, calls Google PageSpeed Insights for Core Web Vitals data, and returns the result. The result is also written to a public report URL (as described above) and the global scan counter is incremented. Your scan history is also saved in your browser's localStorage for personal convenience — that part never leaves your device.

Local Storage

We use your browser's localStorage to save:

• Theme preference (light/dark mode)
• Language preference (your selected language)
• Scan history (URLs and scores of your past scans)
• Scan counter (number of scans you've performed)

This data stays on your device and can be cleared at any time by clicking "Clear History" in the footer or clearing your browser data.

Third-Party Services

We use the following third-party services. Each has its own privacy policy and data-handling practices outside our control:

• Cloudflare Workers & Cloudflare Pages — Hosts the application. Cloudflare retains standard server logs (IP, user-agent, timestamp, request path). See Cloudflare's privacy policy.
• Google Analytics 4 — Page views, scan-event analytics, traffic source attribution. According to Google, GA4 does not log or store IP addresses, but Google still receives your IP address (to derive an approximate location), user-agent, and referrer. We do not currently honor Do-Not-Track or Global Privacy Control signals. You can opt out via browser extensions or Google's opt-out add-on.
• Google PageSpeed Insights API — Called from our Worker when you run a scan, to fetch your site's Core Web Vitals. The URL you scan is sent to Google's API.
• Google Fonts — Provides the Inter and JetBrains Mono typefaces. Loaded from Google's CDN, which records request IPs.
• Impact.com — Affiliate-tracking script that is loaded on the homepage, used for the few tool recommendations that include affiliate links. It may set a cookie, in particular when you click an affiliate link. See Impact's privacy policy.

Affiliate Links

Some tool recommendations in scan results may contain affiliate links. These are clearly identified and do not affect your scan results or scores in any way.

Contact

If you have questions about this privacy policy, contact us at contact@seoscore.tools or visit our About page.

Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision.