Privacy policy

Last updated October 18, 2026. Contact: rankroot.support@proton.me

Audits

When you (or the RankRoot API, MCP server or WordPress plugin) run an audit, we receive the website URL. Our crawler, RankRootBot, then fetches that site's public pages, robots.txt, sitemap and llms.txt. We store the result, the audited domain and daily scan counts. Audit results are public: anyone can open /report?url=<site>, and audited domains may get a public page at /site/<domain> and appear in our sitemap. Do not audit URLs you consider private. To have a domain's page removed, email us from an address at that domain.

Email addresses

If you enter your email on a report, we store it with the site you were looking at, the language of the page and where you signed up. We email you that report right away, then at most one follow-up about three days later after re-checking the same site. Nothing else is sent unless you sign up for more. We never sell your address.

If you turn on weekly monitoring in RankRoot Pro, we store the email address and the sites you add (up to your plan's limit) with your license key, and email you a weekly report for those sites while your license is active. You can remove sites at any time on the Pro page.

Emails are sent through Resend, which processes your address and the email content to deliver them. Our emails contain no tracking pixels. Every email has an unsubscribe link (and supports one-click unsubscribe in your mail app): using it adds your address to a do-not-email list and we never email it again. You can also reply or write to us to unsubscribe or have your address deleted.

Launches

When you launch a product we store what you submit (name, website, tagline, description, category) and publish it. We also store your email to send the confirmation and launch emails; it is never shown. Clicks on a launch's Visit button are counted per day without cookies or IP addresses. Email us to remove a launch.

Payments and license keys

Checkout, billing and license keys are handled by Polar, our merchant of record. We do not see your card details. When you activate a key, we validate it with Polar and keep it in your browser. Pro scan history and weekly monitoring settings are stored against your key.

AI mention check

The AI mention check sends the brand, site, category and competitor names you enter to Google's Gemini API to generate answers. Google's free-tier terms allow Google to use this data to improve its products, and human reviewers may read it, so do not enter confidential information. You must be 18 or older to use it.

Anonymous usage counts

To see how many people use the site and which steps they reach, our own server counts page views (the path only, never the query string) and a few actions such as starting a scan, opening a report or clicking a checkout link. We use no cookies, no local storage and no third-party analytics scripts. To count daily unique visitors, we combine your IP address and browser user agent with a random value that changes every day and keep only a short one-way hash of the result for that day; the IP address and user agent are not stored, and the old daily value is deleted, so hashes cannot be linked across days or traced back to you. Only daily totals are kept. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.

Infrastructure and logs

The site is hosted on Netlify, which processes IP addresses and request logs to serve and protect the site. We use IP addresses briefly for rate limiting. We do not use advertising trackers or sell personal data.

Retention and your rights

Audit data is kept while it is useful for the index and reports; email addresses until you unsubscribe or ask for deletion. After you unsubscribe we keep only a one-way hash of the address, so we can make sure it is never emailed again. You can ask us to access, correct or delete your data at the email above.