Privacy Policy

Who we are

RankRocket is an SEO analysis service operated by Strontium Technologies. This policy covers the RankRocket web application and marketing site.

What we collect

Account information

Your email address, your name, and — if you register with a password — a bcrypt hash of that password. We never store your password itself. If you sign in with Google, we receive your email, name, profile picture URL and Google account identifier, and store those instead.

Websites you submit

When you submit a URL we crawl publicly accessible pages on that site and store what we find: page titles, meta descriptions, heading structure, links, image references and alt text, canonical tags, structured data, HTTP status codes, page sizes and load times. We also retain the raw HTML of crawled pages so reports can be regenerated without re-crawling.

Only submit sites you own or are authorised to audit.

Google Search Console data

Connecting Search Console is optional and separate from signing in with Google. If you connect it, we request read-only access to your Search Console data and store an OAuth refresh token so we can keep reading it without asking you again. We use it to retrieve your verified properties, search performance totals, top queries and top pages, and to identify queries where you rank between 4th and 20th.

We do not write to your Search Console account, and we do not use this data for anything other than generating your reports. You can disconnect at any time from the dashboard, which deletes the stored tokens. You can also revoke access directly in your Google account permissions.

Third parties

• Google — for sign-in and, if you connect it, Search Console data.
• Google Gemini — page content and metadata from your crawls may be sent to Google's Gemini API to generate written recommendations.
• MongoDB — where accounts, crawl results and recommendations are stored.
• Vercel Analytics & Speed Insights — cookieless, aggregated page-view counts and real-user performance metrics (page load timings) on this website. No persistent identifier is stored on your device and no profile is built about you.

We do not sell your data, and we do not use it to train models of our own.

Cookies

We set two cookies after you sign in: an authentication token and a copy of your basic profile, both expiring after seven days. They exist to keep you signed in. We do not use advertising or third-party tracking cookies.

Retention and deletion

We keep your account and crawl history until you ask us to remove it. Self-service account deletion is not built yet — email us and we will delete your account, crawl results, recommendations and any stored Search Console tokens.

Security

Passwords are hashed with bcrypt and API access is authenticated with signed tokens. No system is perfectly secure, and we won't claim otherwise. If you find a vulnerability, please report it to us rather than disclosing it publicly.

Your rights

You can request a copy of your data, ask for corrections, or ask for deletion. Depending on where you live you may have additional rights under GDPR or similar law. Contact us and we will action the request.

Changes

If this policy changes materially we will update the date at the top. Continuing to use RankRocket after a change means you accept the revised policy.

Contact

Questions about privacy: get in touch.