Privacy Policy
Last updated 28 July 2026
In short: the tools require an account, so we hold your email address and your name and picture from your sign-in provider. We do not sell your data and we do not keep a history of what you look up. Your IP address is recorded briefly to stop abuse. The detail is below.
1. Who we are
CadenceSEO operates this site and the free SEO tools on it. For the purposes of the UK and EU General Data Protection Regulation, we are the data controller for the personal data described in this policy.
You can contact us about anything in this policy at kevin@cadenceseo.com.
2. What we collect
Using the tools requires an account — this policy and our Terms of Service are the only pages you can read without signing in.
2.1 Your account
You can sign in with Google or with an email address and password. Either way we store:
| Data | Where it comes from | Why |
|---|---|---|
| Email address | You, or your Google account | Identifying your account, signing you in, and service messages |
| Name and profile picture | Your Google account, if you sign in that way | Showing who is signed in |
| Password | You, if you sign up with email | Stored only as a salted hash by our authentication provider. We never see it. |
| Which site you signed up from, and when | Recorded automatically | Understanding where sign-ups come from |
2.2 When you use a tool
The tools take a URL or domain from you and fetch it, or look it up with a third-party data provider. We record:
- The address you submit. It is used to run that request and then discarded — we do not store it against your account or build a history of what you have looked up. It may still appear in our hosting provider’s short-term server logs.
- Your IP address, as a short-lived counter used to enforce per-user rate limits. It is stored as a key in our rate-limit store and expires automatically at the end of the limit window, which is at most one hour.
- Backlink reports, cached for seven days against the domain that was looked up — not against you or your IP address — so that repeat lookups do not re-bill the data provider.
2.3 Automatically, on every visit
- Aggregate usage analytics via Vercel Analytics: page views, referrer, approximate location, device and browser type. This is collected without cookies and is not used to identify you individually.
- Standard server logs kept by our hosting provider, which include IP addresses and request metadata.
3. Cookies
We use one cookie, strictly necessary for the site to function.
| Cookie | Purpose | Lifetime |
|---|---|---|
sb-* | Keeps you signed in. Set by our authentication provider. | Until you sign out, or the session expires |
Our analytics provider does not set cookies. Signing in with Google involves cookies set by Google on their own domain, governed by their privacy policy rather than this one.
4. Why we are allowed to hold it
If you are in the UK or the EU, the GDPR requires us to identify a lawful basis for each use:
| What we do | Lawful basis |
|---|---|
| Running your account and signing you in | Performance of a contract with you |
| Rate limiting, abuse prevention and keeping the service up | Our legitimate interest in a service that is not abused and does not run up unbounded cost |
| Aggregate analytics | Our legitimate interest in understanding which tools are used |
5. Who we share it with
We do not sell personal data, and we do not share it for advertising. We do not disclose it to anyone except the service providers below, each of which processes it only on our instructions:
| Provider | What they handle |
|---|---|
| Supabase | Authentication and the database holding your account record |
| Vercel | Hosting, server logs, and cookieless usage analytics |
| Upstash | The rate-limit counters and the backlink report cache |
| Only if you choose to sign in with Google, and only the sign-in itself | |
| Ahrefs | The domain you submit to the Backlink Checker is sent to Ahrefs to retrieve its data. Your identity is not. |
We may also disclose data where we are legally required to, or to establish or defend legal claims.
6. International transfers
We are an Arizona company. Your data is processed in the United States, by us and by the providers listed in section 5.
If you use the tools from outside the United States, using them means your data is transferred here, where privacy law may give it less protection than the law where you live. If you would rather that did not happen, please do not create an account — and email us at kevin@cadenceseo.com if you already have one and would like it deleted.
7. How long we keep it
- Account data — for as long as your account exists. There is no self-service delete yet, so ask us at kevin@cadenceseo.com and we will delete the account and everything attached to it.
- Rate-limit counters — expire automatically within an hour.
- Cached tool results — seven days.
- Server logs and analytics — for the period set by our hosting provider.
8. Your rights
Depending on where you live you may have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, and receive it in a portable format. If you are in California or another US state with a comparable law, you also have the right to know what we collect and to opt out of sale or sharing — we do neither.
Exercise any of these by emailing kevin@cadenceseo.com. We will not charge you or treat you differently for asking, and we will respond within one month.
If you are unhappy with how we have handled a request, you can appeal by replying to our response. If you are in the UK or the EEA you may also complain to your national data protection authority — the Information Commissioner’s Office in the UK.
9. Security
The site is served over HTTPS with a restrictive content security policy. Account records are protected by row-level security so that a signed-in user can read and correct only their own record. Passwords are hashed by our authentication provider and are never visible to us. No system is perfectly secure, but we take these measures seriously.
10. Children
These tools are for marketers and site owners and are not directed at children. We do not knowingly collect data from anyone under 13, and we do not create an account for anyone who tells us they are younger. If you believe a child has given us data, contact us and we will delete it.
11. Changes to this policy
We will update this page when what we do changes, and revise the date at the top. If a change materially affects how we use data you have already given us, we will tell account holders by email.
12. Contact
Questions about this policy, or any request under section 8, go to kevin@cadenceseo.com.