Privacy policy

This website, the free tools on it and the audits sold here are run by the company below. It is the controller of the personal data described in this policy: it decides why and how that data is used.

Company

Illucrum LLC

Registered in

Texas, United States

Address

5900 Balcones Drive 21473, Austin, TX 78731-4257, USA

Email

szymon.kokot@illucrum.com

There is no separate data protection officer. Messages to this address reach the person responsible for your data.

This list is complete. If something isn't on it, we don't collect it.

When you visit any page

Like every web server, ours receives your IP address, your browser and device type, the page you asked for and the time. Cloudflare, which delivers the site and protects it from attacks, processes the same information. We use it to serve pages and keep the site secure, and we don't combine it with anything else.

Google Analytics

Unless it is turned off, Google Analytics records which pages you view, how you arrived (for example from a search engine or another site), your approximate location at country and city level, your device, browser and screen size, and two actions: opening the contact form and sending it. When the form is sent, it also records the company name and website you entered, never your name, email address, phone number or message. Google Analytics does not store your IP address.

When you use the free Bulk SEO Checker

The addresses you paste are sent to our relay, a small program on Cloudflare's network. For each address it makes one request to that site and passes the page back to your browser. It does not save the addresses or the pages, and writes nothing to a database, a log file or an analytics tool. Titles, headings, word counts and every other result are worked out in your browser, and the CSV files are created there too. The site you check sees a request from Cloudflare's network, not from you.

When you use the contact form

We ask for your name, company, website and email address, and optionally a phone number. What you send is stored in a database on our own server and forwarded to our inbox as a notification. We use it only to reply to you.

When you email or message us

We receive your email address or phone number and whatever you write. If you use the WhatsApp or Telegram links, the conversation is also handled by that app under its own privacy terms.

When you buy an audit

We need billing details for the invoice (company name, address and tax number) and keep a record of the payment. For the audit itself we usually ask for read-only access to tools such as Google Search Console or Google Analytics, and for some information about your business. We don't need personal data about your customers. If we come across it in your tools, we don't copy it into the report or keep it.

If we contacted you first

Now and then we email a business about its website without being asked. In that case we used the business contact details published on its website or in a public directory, and a few public facts about the site. We say where we got your address in the first email, we stop as soon as you ask, and we then delete your details.

What we never collect

No accounts or passwords, no payment card details, no data bought from brokers or list sellers, and nothing about health, beliefs or any other sensitive category.

If you are in the European Economic Area, the UK or Switzerland, data protection law (the GDPR) requires a legal basis for every use of personal data. These are ours.

We don't make automated decisions about you, we don't build profiles, and we don't send newsletters.

A few providers process data for us, and only to do the job described next to their name. None of them may use it for their own advertising.

• Cloudflare, Inc. hosts and delivers the website, protects it from attacks and runs the checker relay.
• Our server hosting provider runs the server that receives the contact form and stores what you send.
• Google provides Google Tag Manager, which loads the analytics tag and sets no cookies itself, and Google Analytics, which works as described above.
• Clutch shows our client reviews through a widget and a badge loaded from clutch.co.
• Our email provider stores the emails we send and receive.
• WhatsApp and Telegram, only if you choose to message us there.
• Our accountant, our bank and tax authorities receive invoice and payment records where the law requires it.

We don't sell personal data and don't share it for advertising. We would only hand it to an authority if the law required us to.

We are a US company, so your data is handled in the United States, and some of our providers also process it in other countries.

Google and Cloudflare are certified under the EU-US Data Privacy Framework, which the European Commission recognizes as giving adequate protection. Where a provider is not certified, the transfer relies on the safeguards in its data processing terms, such as the European Commission's standard contractual clauses.

• Server and security logs: up to 30 days.
• Analytics: up to 14 months in Google Analytics. The analytics cookies expire after 2 years. Turning analytics off deletes them straight away, and you can also clear them in your browser.
• Checker: nothing is kept. Results disappear when you close the tab.
• Contact form and emails that don't lead to an audit: deleted within 12 months of our last exchange.
• Clients: for as long as we work together and up to 36 months afterwards. Invoices and accounting records for as long as tax law requires, currently up to 7 years.
• Businesses we contacted first: deleted as soon as you ask, or within 12 months if you don't reply.
• Your analytics choice: kept in your browser until you change it or clear your browser data for this site.

You can ask us to do any of the following. It is free, and we answer within one month. We may ask you to confirm who you are before we act.

• See the personal data we hold about you and get a copy of it.
• Correct anything that is wrong or incomplete.
• Delete your data, unless the law requires us to keep it, as with invoices.
• Restrict how we use it while a question about it is being resolved.
• Object to any use based on our legitimate interest. If we contacted you first, an objection always ends it.
• Receive the data you gave us in a common format, or have it sent to someone else.
• Turn analytics off, or back on, at any time: Cookie settings

If you think we have handled your data wrongly, please tell us first and we will try to put it right. If you are in the EEA, the UK or Switzerland, you can also complain to a data protection authority, usually the one where you live or work; in Poland that is the President of the Personal Data Protection Office (UODO).

If you live in a US state with its own privacy law, such as California, you have similar rights to know, correct and delete your data, and we honor them whether or not the law applies to a business our size. We don't sell or share personal information as those laws define it, and we don't use it for targeted advertising.

The site doesn't respond to Do Not Track or Global Privacy Control signals. To stop analytics, turn it off in Cookie settings. We don't let advertising or tracking companies collect information about you across other websites through this site.

All traffic to the site is encrypted. Access to the database, the inbox and our provider accounts is limited to the person who needs it and protected with strong passwords and two-factor authentication. No system is perfectly secure: if a breach put your rights at risk, we would tell you and the relevant authority without undue delay.

This site and our services are meant for businesses. They are not aimed at children, and we don't knowingly collect data about anyone under 16.

When something changes, we update this page and the date at the top. If a change affects a client whose audit is in progress, we also tell them by email.