HellSEO

Privacy Policy

Last updated September 2026

This policy covers HellSEO (“we”, “us”) at hellseo.site. Using the site means you agree to how we handle data as described below.

What we collect

  • Account info — if you sign in with Google (via Supabase Auth), we receive and store your Google account's email address, display name, and profile photo URL, plus an internal account ID. We only request the basic openid, email, and profile scopes — we never request access to your Gmail, Drive, contacts, or any other Google data.
  • Audit data — the URLs you audit and the resulting report (scores, issues, fixes) are stored against your account so you can view history and compare runs.
  • Free tools — the tools under /free-tools don't require an account and don't store the URL you check or the content you generate. Each request is processed and the result returned; nothing is written to a database.
  • Usage data — standard server logs (IP address, request timing) via our hosting provider, Vercel, for reliability and abuse prevention.

How we use your information

  • Your Google email and account ID are used solely to authenticate you, identify your account, and associate your audit history with it. We don't use this data for advertising, and we don't combine it with data from other sources to build a profile of you.
  • The URL you submit for a full audit is used only to run that audit and generate your report.
  • Usage/server logs are used only for reliability, debugging, and abuse prevention.

Third parties we send data to

Your Google account data (email, name, profile photo) is never sent to or shared with any third-party API. It's stored only in our database, hosted by Supabase, and used only to identify your account. Running an audit calls a few external APIs with the URL you submit — not your account details:

  • Google's Gemini API and PageSpeed Insights API, to analyze content and performance.
  • OpenPageRank, to look up domain authority.

Authentication and our database are handled by Supabase, acting as our data processor. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements — we don't use Google user data to train AI/ML models, for targeted advertising, or for any purpose beyond providing and improving HellSEO. We do not sell your data, transfer it to data brokers, or use it for credit assessment.

Data retention & deletion

We keep your account info and audit history for as long as your account exists, so your score history stays intact. To delete your account, its Google sign-in data, and its audit history, contact us via email — we'll delete it within a reasonable time and confirm once it's done.

Data security

Data is stored with Supabase (Postgres) over encrypted connections. We don't store passwords ourselves — sign-in is handled entirely by Google via Supabase Auth, so we never see or hold your Google password.

Cookies

We use a session cookie (set by Supabase Auth) to keep you signed in. See the Cookies page for details.

Changes

If this policy changes materially, we'll update the date at the top of this page.