Privacy Policy

1. Who we are

Tool SEO Kit is operated by Sachin Mittal, the data controller for the purposes of UK and EU data protection law. Contact: sachinmittal9552@gmail.com.

2. What we collect

URLs you submit. Required to run a scan. You do not need an account and we do not ask for your name, email or payment details to use the free tools.

Scan results. The report generated for a URL, including data read from that page’s public HTML, is stored so the report can be shown again without re-scanning.

Technical data. Our hosting provider and analytics tools process your IP address and browser information. IP addresses are also used for rate limiting, to stop the scanner being abused.

3. Legal basis

We rely on consent for all non-essential analytics, which is why none of it loads until you accept the cookie banner. We rely on legitimate interests for security, abuse prevention and keeping the service working, and to provide the scan you asked for.

4. Cookies and analytics

Nothing in this list runs unless you press “Accept” on the cookie banner:

• Google Analytics — aggregate traffic measurement.
• Microsoft Clarity — usage analytics and session replay.
• Hotjar — usage analytics and session replay.

Session replay tools record how you move through pages. They can capture what you type into the scan box; we do not ask for sensitive information anywhere on this site.

Vercel Analytics and Vercel Speed Insights run on every page, including before you answer the banner. They are used to measure page performance, set no cookies, and do not build a profile of you across sites.

You can change your answer at any time using the Cookie settings link in the footer of any page. Withdrawing consent stops the tools above from loading.

5. Who else processes your data

• Vercel — hosting, and the analytics named above.
• Google Firebase / Firestore — storage of generated reports.
• Google PageSpeed Insights and Chrome UX Report — performance data for the URL you submit.
• Groq — a language model used to analyse the scanned page’s text.

These providers may process data outside the UK and EEA. Where they do, transfers rely on the providers’ own safeguards, such as Standard Contractual Clauses.

6. Published reports

A completed scan is stored and served at a public address, for example toolseokit.com/example.com. Reports include short excerpts of the scanned page’s publicly available content to explain a finding. Anyone with the link can view a report, and some may be listed in our sitemap.

If you are responsible for a scanned site and want its report removed or excluded from future scans, email sachinmittal9552@gmail.com and we will remove it. You can also block us in your robots.txt — see our crawler policy.

7. How long we keep things

Reports are kept until they are no longer useful or until removal is requested. Rate-limiting records are short-lived and expire within minutes. Analytics retention is governed by each provider’s own settings.

8. Your rights

If UK or EU data protection law applies to you, you have the right to access, correct, erase, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time. Email the address above to exercise any of them.

You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).

9. Security

Traffic is served over HTTPS and stored reports are not publicly writable. No method of transmission or storage is completely secure, and we do not claim otherwise.

10. Changes

If this policy changes materially we will update the date at the top of this page.