Privacy Policy

Last updated: March 12, 2026

1. Introduction

Website Ranking Checker ("Service", "we", "us", "our") is operated by Axeman Technology Solutions LLP, the company behind Keywords Everywhere. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

Website Ranking Checker is a free keyword rank tracker that uses data from Google Search Console to help you monitor your website's search performance. By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Keywords Everywhere API Key

Your Keywords Everywhere API key is used as your login credential. It is encrypted using AES-256-GCM and stored securely in our database. We use your API key to verify your identity, determine your plan tier, and generate links to your Keywords Everywhere subscription page.

Email Address

During onboarding, you may optionally provide an email address for ranking alert notifications. Your email address from your Keywords Everywhere account is also received (in encrypted form) during login for account identification. Email addresses are stored encrypted at rest.

Google Search Console Data

When you connect your Google Search Console account, we access the following data:

  • Your list of verified websites (domain properties)
  • Search queries (keywords) and their associated landing pages
  • Clicks, impressions, click-through rate (CTR), and average position for each query
  • The above data broken down by date and by country

We do not access your Google account profile information (name, email, profile picture, or any other personal information from your Google account). We only access Search Console analytics data.

Session Data

We use session cookies for authentication and to maintain your login state. No tracking cookies or third-party advertising cookies are used.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Display your keyword ranking positions and trends on your dashboard
  • Track daily changes in your keyword positions across your domains
  • Generate SEO opportunity reports (CTR optimization, content decay, quick wins, keyword cannibalization, dead pages, and rising keywords)
  • Send email alert notifications when your keyword positions change significantly
  • Enrich your tracked keywords with search volume, CPC, and competition data via the Keywords Everywhere API
  • Authenticate your identity and manage your session

4. Google Search Console Data

This section specifically addresses how we handle data from Google Search Console, as required by Google's verification process.

Scope of Access

We request read-only access to your Google Search Console account using the webmasters.readonly OAuth scope. This means we can view your search analytics data but cannot modify any settings, submit sitemaps, or make any changes to your Search Console account.

Data We Access

We access only your Search Console search analytics data: the list of your verified sites, and for each site, the search queries, landing pages, clicks, impressions, CTR, and average position. This data is fetched on a daily basis and stored in our analytical database for trend tracking and report generation.

No Google Profile Data

We do not request or access any Google profile information. We do not collect your Google account name, Google email address, Google profile picture, or any other personal data from your Google account. The only Google data we access is Search Console website performance data.

Token Storage

Your Google OAuth tokens (access token and refresh token) are encrypted using AES-256-GCM before being stored in our database. Tokens are automatically refreshed when they expire. You can revoke access at any time by disconnecting Google Search Console from your Settings page, which immediately deletes your stored tokens.

Purpose Limitation

Your Google Search Console data is used solely to provide the rank tracking and SEO reporting features of Website Ranking Checker. It is not used for any other purpose.

5. Google API Services User Data Policy Compliance

Website Ranking Checker's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only use Google Search Console data to provide and improve the rank tracking features visible and described in this Service
  • We do not sell your Google Search Console data to third parties
  • We do not use your Google Search Console data for advertising, retargeting, or any marketing purposes
  • We do not transfer your Google Search Console data to third parties, except as necessary to provide the Service, with your explicit consent, or as required by applicable law
  • We do not use your Google Search Console data to determine creditworthiness or for lending purposes
  • Human access to Google user data is limited to necessary debugging, investigating abuse, responding to support requests, and complying with applicable law

6. Data Storage and Security

We take the security of your data seriously. The following measures are in place:

  • Encryption at rest: OAuth tokens, API keys, and email addresses are encrypted using AES-256-GCM (authenticated encryption) before storage
  • Encryption in transit: All communication with external APIs (Google, Keywords Everywhere, SendGrid) uses TLS/SSL encryption
  • Session security: Session cookies are HTTPOnly, Secure, and SameSite=Lax. Session IDs are regenerated every 30 minutes to prevent session fixation
  • CSRF protection: All form submissions are protected with CSRF tokens
  • Database security: All database queries use prepared statements with parameter binding to prevent SQL injection
  • Rate limiting: Login attempts are rate-limited to prevent brute force attacks

7. Data Retention

We retain your data for the following periods:

  • Search Console analytics data: 2 to 10 years depending on your Keywords Everywhere plan tier (Free: 2 years, Bronze: 3 years, Silver: 4 years, Gold: 5 years, Platinum: 10 years). Older data is automatically deleted by our weekly cleanup process.
  • Tracked keyword rankings: Retained while your account is active
  • Position alerts: 7 days
  • Search score history: 365 days
  • Application logs: 30 days
  • Session data: Approximately 12 hours

When you disconnect Google Search Console, your OAuth tokens are immediately deleted. Your previously fetched Search Console analytics data is retained according to the schedule above unless you request its deletion.

8. Third-Party Services

We use the following third-party services:

Keywords Everywhere API

We send your tracked keyword text and country code to the Keywords Everywhere API to retrieve search volume, CPC, and competition data. We do not send any Google Search Console metrics (clicks, impressions, position, CTR) to Keywords Everywhere. Only keyword text and country code are shared.

SendGrid

We use SendGrid for transactional email delivery only (ranking alert digests and email verification). SendGrid receives your email address and alert content (keyword names, domain names, position changes) as needed to deliver these emails. No other data is shared with SendGrid.

Google reCAPTCHA v3

Our login page uses Google reCAPTCHA v3 for bot protection. This is subject to Google's Privacy Policy and Terms of Service.

We do not use any analytics services, tracking pixels, advertising networks, or data brokers.

9. Your Rights and Choices

You have the following options for controlling your data:

  • Disconnect Google Search Console: Go to Settings and click "Disconnect." This immediately deletes your stored OAuth tokens and stops all data fetching from Google.
  • Remove tracked keywords: You can delete individual tracked keywords from the Keywords page, which removes them from tracking and their associated ranking data.
  • Change notification settings: Adjust or disable alert emails from the Settings page.
  • Account deletion: To delete your account and all associated data, contact us at privacy@websiterankingchecker.com. We will process your request and confirm deletion.

We use session cookies solely for authentication. These cookies are:

  • HTTPOnly (not accessible to JavaScript)
  • Secure (transmitted only over HTTPS)
  • SameSite=Lax (protection against cross-site request forgery)

We do not use tracking cookies, advertising cookies, or third-party cookies. The only exception is Google reCAPTCHA on the login page, which may set its own cookies as part of bot detection.

11. Children's Privacy

Website Ranking Checker is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@websiterankingchecker.com and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

privacy@websiterankingchecker.com

Axeman Technology Solutions LLP