Privacy Policy
Last updated 3 September 2026
SEO Toolbox Online (“we”, “us”) operates the website analysis and SEO audit service at seotoolbox.online. This policy explains what we collect, why, and the choices you have. We keep it short on purpose.
What we collect
- Scans you run. The URL you submit, the pages our crawler fetches from that site, and the audit results and lab measurements we generate.
- Account data (if you register). Your email address, a securely hashed password, and optionally your name and phone number.
- Anonymous scan counters. When you scan without an account we store a salted hash of your IP address and a random browser token, purely to apply the daily free limit. Neither is linked to an identity and neither can be reversed to your IP.
- Contact messages. If you use the contact form we store your name, email, message and a salted hash of your IP (for abuse prevention).
- Billing data (paid plans). Payments are processed by PayHere. We store the order reference, amount, currency and status — never your card details.
- Operational logs. Standard server logs (request metadata, errors) retained for a short period for security and debugging.
How we use it
- To run the scans you request and show you the reports.
- To operate your account, enforce plan limits, and process payments.
- To send transactional email (verification, password reset, receipts, scan-complete notices).
- To keep the service secure and prevent abuse.
We do not sell your data, and we do not use it for advertising or share it with advertisers.
Third parties
We rely on a small number of processors to run the service:
- Hosting & infrastructure — our servers and database provider.
- Cloudflare — CDN, DNS and DDoS protection in front of the site.
- PayHere — payment processing for paid plans.
- Google PageSpeed Insights API — when a performance report is generated, the URL you scanned is sent to Google to retrieve Lighthouse and Chrome UX Report data.
- Email provider — to deliver transactional email.
Retention
Scan results are kept so you can revisit them. You can delete individual scans, and deleting your account removes your account data and its scans. Anonymous scan counters expire automatically. Contact messages are kept while relevant to your enquiry.
Your rights
You can access, correct, export or delete your data from your account settings, or by emailing us. If you are in a jurisdiction with statutory data-protection rights (e.g. the EU/UK GDPR), you may also object to or restrict certain processing and lodge a complaint with your local authority.
Cookies
We use only essential cookies / local storage needed to keep you signed in and to remember the anonymous-scan browser token. No analytics or advertising cookies.
Contact
Questions or requests: [email protected] or via our contact form.