Privacy Policy

1. Information we collect

Depending on the features you use, we may process:

• Registration and account information: email, username, nickname, a secure password hash, email verification status, and session data needed to keep you signed in. We do not store plaintext passwords.
• Information you submit: saved works, project requests, and other information you provide in website forms.
• Operations and visit analytics: homepage visit time, IP address, language, referring site domain, browser and device category. Our servers may also record necessary request and error logs.

2. Google Search Console data

We access this site’s Search Console properties only after a site administrator selects “Connect Google (read-only)” and grants access. We request the webmasters.readonly scope. This permission does not allow us to change Search Console settings or website content.

We read the property list, search performance data (such as queries, pages, clicks, impressions, click-through rate, and average position), and URL indexing inspection results to display and diagnose this site’s search performance. We store the Google refresh token encrypted on the server to obtain short-lived access tokens for scheduled API requests.

3. How we use information

We use account and submitted information for sign-in, saved works, project requests, and necessary service messages. We use visit analytics and logs to maintain performance, security, and reliability.

Search Console data is used only to show site administrators search performance, indexing status, and diagnostics for this site. We do not sell Google user data, use it for targeted advertising, or use it to train general-purpose AI models. Administrative access is restricted.

4. Service providers and retention

We may use hosting, content delivery, and email providers to operate the website, sharing only information needed for those functions. Search Console data comes from Google APIs; Google also handles information exchanged with its services under its own policies.

We retain information as needed to provide the service, maintain security, and respond to lawful requests. Disconnecting Google in the admin area deletes the stored refresh token and stops future synchronization. Previously synchronized reports and inspection results are not automatically deleted. You may request deletion of these records or other personal information using the email below, subject to legal retention duties.

5. Security and your choices

We use HTTPS, restrict administrative access, and encrypt the Google refresh token at rest. You can manage your account information. An authorized Search Console administrator can disconnect Google in the admin area. You may also email us to request access, correction, or deletion.

We may update this policy when our features or data practices change. The latest update date appears on this page.