Privacy Policy

Last updated: June 2026

Short version: we collect only what we need to run the service, we don't sell your data, and you can ask us to delete everything at any time.

What we collect

Email address — to create your account and send transactional emails (API key creation, billing receipts).
API usage logs — endpoint called, timestamp, credits consumed, and response status. Retained for 90 days. Used for billing accuracy and abuse detection.
Payment data — processed entirely by Stripe. We never see or store your card number.
IP address — logged per request by Cloudflare for rate limiting and security. Not linked to your account in our database.

We use Google Analytics 4 and PostHog to understand how visitors use RankParse — pages visited, time on site, and general traffic patterns. Neither tool receives personal data from API requests.
Google Analytics sets cookies (_ga, _gid) to distinguish visitors. PostHog stores session data in browser localStorage (not cookies). Both tools are only loaded after you explicitly accept analytics via the consent banner.
To withdraw consent: clear your browser's localStorage and cookies for rankparse.com, or click 'Decline' on the consent banner in a private window. Your choice is stored locally and persists across sessions.
Data processed by Google is governed by Google's privacy policy. Data processed by PostHog is governed by PostHog's privacy policy.

We do not sell, rent, or share your personal data with third parties for marketing.
We do not track you across other websites.
We do not set any cookies without your consent, except for authentication session cookies strictly required to keep you logged in.

RankParse API responses are derived from public, open web datasets. The link data, domain metrics, and page metadata we return are not personal data: they describe publicly crawlable web pages and domains, not individuals.

RankParse runs on Cloudflare's global edge network. Your requests are processed in the Cloudflare region closest to you. Account data and datasets are stored on Cloudflare infrastructure (US region).

Account data is retained until you delete your account.
Usage logs are retained for 90 days.
If you delete your account, we delete your email, API keys, and usage logs within 30 days. Credit balances are forfeited on deletion.

Account creation and service delivery (email, API keys, usage logs, billing): necessary for the performance of a contract — Article 6(1)(b) GDPR.
Analytics (Google Analytics, PostHog): consent — Article 6(1)(a) GDPR. Only processed after you opt in via the cookie banner.
Security, rate limiting, and fraud prevention (IP address, request metadata): legitimate interests — Article 6(1)(f) GDPR.
Payment processing: necessary for the performance of a contract — Article 6(1)(b) GDPR, processed by Stripe as an independent controller.
EU/EEA customers using the RankParse API can request a signed Data Processing Agreement (DPA) under GDPR Article 28. See rankparse.com/dpa or email support@rankparse.com.

You can request a copy of your data or ask us to delete your account at any time by emailing support@rankparse.com. We will respond within 5 business days.
EU/EEA residents also have the right to object to processing based on legitimate interests, restrict processing, and lodge a complaint with your local supervisory authority.

On-page analysis runs entirely in your browser. When you open the extension popup, it reads the current page's HTML to extract meta tags, headings, links, and images. This analysis runs locally — no page content or URL is transmitted to RankParse or any third party.
Domain data is only fetched when you request it. When you click “Load domain data” or enable SERP metrics, the extension sends the domain name (e.g. example.com) to api.rankparse.com to retrieve authority scores, backlink counts, and tech stack information. No full URLs, page content, or browsing history are transmitted.
Your API key is stored locally. If you connect a RankParse API key, it is saved in your browser's local extension storage and is never transmitted to any server other than api.rankparse.com for authentication.
Cached data is stored locally. Domain authority scores and backlink data are cached in your browser's local extension storage for 24 hours to avoid repeat API calls. This data never leaves your device.
No browsing history is collected. The extension does not record, log, or transmit the pages you visit. The SERP content script activates only on google.com search result pages and reads search result domain names solely to display authority scores inline.
To remove all locally stored extension data, uninstall the extension or clear its storage via your browser's extension settings.
Install the extension on Chrome, Edge, or Firefox from /extension.

If we make material changes to this policy, we will notify you by email at least 14 days before the changes take effect.