Privacy Policy

What we collect

• Account — your email address, optionally your name, and a hashed password. If you sign in with Google we also store the avatar URL Google provides.
• The URLs you submit and the verdicts we produce, so you can re-run a list and compare it over time.
• Billing — your credit balance and an audit record of every credit movement. We never store card numbers; Paddle handles those.
• Technical — the IP address you signed up from (used to limit abuse of free credits), and a sampled log of API requests for security and debugging.
• How you found us — when you sign up: the website that sent you (its domain only, such as google.com — never the page or your search), any campaign tags in the link, the page of this site you signed up from, and your answer to “How did you hear about us?” if you give one. It tells us which channels are worth our time, and it is stored on your account, not shared.

Email we send you

Two kinds, and you can stop one of them.

• Service email — verification codes, password resets, receipts, and the rank alerts you switched on yourself. These are part of the account, so they have no unsubscribe link.
• Product updates — occasional email about what changed in the product. Every one carries an unsubscribe link, one click stops them for good, and nothing else about your account changes.

We do not send email on anyone else's behalf, and your address is never shared with another sender.

What we do not do

• We do not sell your data.
• We do not use your URL lists to build or train anything.
• We do not use Google Analytics for advertising personalization.

Who we share it with

Only the processors needed to run the service:

Note that checking a URL necessarily means sending that URL to our search data provider — that is how the check works.

How long we keep it

• Checks and their summary counts — kept while your account is open, so your history stays intact.
• Detailed per-URL results — may be pruned after a retention period; the summary counts remain.
• Credit records — kept as long as needed for accounting and tax purposes, since they are the record of what you paid.
• API request logs — around 30 days.

Your choices

• Delete any project or individual check from the app at any time.
• Use “Cookie settings” to accept or reject Google Analytics cookies at any time.
• Request a copy of your data, or deletion of your account, by emailing [email protected] . We may need to retain billing records after account deletion where the law requires it.

Cookies

Google Analytics loads on the marketing site and app only after you accept analytics cookies. It uses cookies such as _ga to distinguish visits. We send page paths without query strings or fragments in our page-view events. We do not send your email, submitted URL lists, or payment details in those events. Your accept/reject choice is stored for 180 days in an ia-analytics-consent cookie shared between indexaction.com and its subdomains. Rejecting through Cookie settings removes the Google Analytics cookies accessible to this site and stops Google Analytics on the current page.

This marketing site also keeps two notes in your browser's session storage — the domain of the site that sent you here with any campaign tags, and which of the free checkers you have run — so that they can be attached to your account if you sign up. Session storage is cleared when you close the tab. The notes are sent only when you follow a sign-up or log-in link, or run a free checker: each free check is recorded with where you came from and how many URLs or keywords were checked, but not the URLs, domain or keywords themselves, and with a one-way hash of your IP address rather than the address. The app stores your session token and your light/dark theme preference in your browser's local storage — needed for it to work, and not used for tracking.

Contact

[email protected] · Contact page