Privacy notice
Last changed Oct 21, 2026.
Who is responsible
Danijel Petrovic, Serbia, who runs SEO Uptime, is responsible for the personal data described here. Write to hello@seouptime.com with any question or request.
What we keep
- Your account: your name, email address, a hash of your password, and any passkeys you register. We need these to let you sign in.
- Your teams: their names, who is a member and in which role, and invitations you send.
- Your sites: the addresses you add, their settings, and what our crawler fetched from them and found. These are pages your site publishes to anyone.
- Integrations: the email addresses, Slack and webhook URLs that alerts go to; webhook signing secrets, stored encrypted; and API tokens, stored as hashes.
- Google Search Console, if you connect it: the Google account's email address, the list of properties it can see, a token, stored encrypted, that lets us read that account's Search Console data, and what Google's URL Inspection reports about your sites' pages. The access is read-only: we cannot change anything in your Search Console, and we never ask Google to crawl or index a page. Unlinking a site, or linking it to another property, deletes what Google reported about it. Disconnecting the account, or deleting the team, also revokes the token at Google and deletes the token here.
- Billing: if you buy Pro, Paddle tells us the subscription, its status, the invoice amounts and the customer's name and email. Paddle keeps the card; we never see it.
- Logs: the server records requests, including IP addresses, to keep the service running and safe.
Why
To provide the service you signed up for, which is the contract between us; to keep it secure and stop abuse, which is our legitimate interest; and to keep the records the law requires. We do not sell your data or show advertising. To know how many people read our public pages, we count page views with Cloudflare Web Analytics, which sets no cookies and does not identify you or follow you from site to site. The dashboard is not counted.
What we read from Google Search Console is used only for features you see in SEO Uptime: proving a site is yours, showing what Google reports about its pages beside our findings, and the issues and alerts based on Google's answers. SEO Uptime's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else handles it
- Paddle (Paddle.com Market Ltd), our reseller and the Merchant of Record for Pro, which handles payments under its own privacy policy.
- Hetzner Online GmbH, whose server the service and its database run on.
- Cloudflare, which every request to seouptime.com and whynotindexed.com passes through, and which counts the page views of their public pages.
- Resend, which delivers the emails we send you: confirmations, password resets, invitations and alerts.
Some of these process data outside your country, under the safeguards the law requires, such as the European Commission's standard contractual clauses.
Cookies
Only the ones the service needs: a session cookie that keeps you signed in, one that protects forms against forgery, and two that remember your light or dark setting and whether the sidebar is open. Paddle's checkout sets its own while you pay.
How long
- Crawl results and findings: 30 days on Free and 12 months on Pro, then they are deleted. Each site keeps its latest crawl and the problems it still has. When Pro ends, its history stays for another 30 days.
- Your account and teams: until you delete them. A deleted team is kept 30 days, so a mistake can be undone, then deleted with everything in it. Deleting your account deletes the teams nobody else is in. Nightly backups keep a copy for a short while longer.
- What Google reported about your pages, if you connect Search Console: until you unlink the site, link it to another property or disconnect the account. Deleting a team deletes it at once, with the token.
- Invoices: as long as tax law requires.
Your rights
You can see, correct, export or delete your data, object to how we use it, and complain to your data protection authority. Most of it you can change or delete yourself in your settings; for anything else, write to us and we answer within a month.