Privacy Policy
Last updated:
This policy explains what freeseo-check.com (the “Service”) collects and why. The Service is operated by Wunderfauks Group Pte Ltd, a company registered in Singapore, and personal data is handled in line with Singapore's Personal Data Protection Act 2012 (PDPA). For visitors from the EU and UK, see section 8; wherever else you are, section 10 applies to you.
1. What we collect
- Scan history. When a website is analysed we store the scanned URL, the date, the scores and the individual check results. This powers the “compared to your last scan” trend and the overall checkups counter. It is information about the scanned website, not about you: no visitor identifier is stored with it, and there are no accounts.
- Email address (optional). Where the “email me this report” option is available and you use it, the address is used once to send that PDF. It is not stored in a marketing list and you will not receive anything else. The address may appear transiently in delivery logs, which are not kept any longer than is needed to confirm the message was sent.
- Server and security logs. Like almost every website, our server keeps standard access logs (IP address, request time and path) used for security, abuse prevention and rate limiting. They are rotated automatically and kept only as long as we need them for those purposes, normally a matter of days, and are not used to profile visitors.
- Analytics (only with your consent). If you accept in the cookie banner, we use Google Analytics to understand overall traffic: pages visited, approximate location and device type. The address of the site you scanned is stripped out before anything is sent to Analytics. Google's own handling of Analytics data is described in Google's privacy policy.
- Article checker. When you paste text or upload a document to check an article, it is analysed in memory on our server and then discarded: the text is not stored, not logged and not sent to any AI provider. We keep only the result - the scores, which checks passed or failed, the word count, and the target keyword if you gave one - so we can see which problems are most common. If you check a published URL, that address is kept with the result, as it is for a website scan. We also keep a one-way fingerprint of the text (a hash), so that repeat checks of the same draft can be counted. It cannot be turned back into the text.
- Usage counters. We keep simple daily tallies of how often features are used - checkups started, articles checked, PDFs downloaded, the WhatsApp button pressed, and so on. These are counts only: a number per feature per day, with nothing recorded about who did it. They set no cookies and are not linked to you, your device or your IP address.
- Local preferences. Your theme, cookie choice, “show where this site is hosted” preference and last report are kept in your own browser's storage, on your device, and are not transmitted to us.
2. Why we collect it
To run the Service (produce reports, show trends over repeat scans), to keep it secure and fairly available (rate limiting, abuse prevention), and - with consent - to understand aggregate usage so we can improve it. We do not sell personal data, and we do not use it for advertising. Everything you send us travels over HTTPS, and is stored on an access-controlled server in Singapore; access is limited to those who need it to operate the Service. Some technical lookups about the scanned website itself (DNS, WHOIS, and the hosting-location lookup if you switch it on) use the older unencrypted protocols those public services provide. Those lookups carry the scanned website's domain or address, and nothing about you.
3. Cookies
The Service itself works without cookies. Google Analytics sets cookies only after you choose “Accept” in the cookie banner; choosing “Decline” keeps analytics off entirely. If you withdraw consent later, analytics stops immediately and we clear the cookies it set; any your browser keeps beyond that expire on their own. You can change your choice any time via “Cookie preferences” in the footer of any page, including this one.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes visitors (aggregate statistics) | Up to 2 years |
| _ga_* | Google Analytics | Keeps session state | Up to 2 years |
Your cookie choice itself, and preferences like theme, are kept in your browser's local storage - they are strictly necessary or user-requested settings and set no cookies.
4. Who we share data with
Service providers that make the tool work: our hosting provider, Google (the PageSpeed API and, with your consent, Analytics), the AI providers queried during the AI-visibility check, an IP address lookup provider when you switch on the hosting-location option, and - when you request an emailed report - our email delivery provider. Every scan also queries public DNS resolvers and registry WHOIS servers, which receive the scanned website's domain name. The AI providers receive the questions asked, which include the scanned website's brand name, keywords taken from its pages and its hosting country; the IP lookup provider receives the scanned site's address. Neither receives anything about you as a visitor. The AI providers change from time to time as models are retired and replaced; if you would like the current list, or the identity of any other provider named here, email us and we will tell you. We do not sell or rent personal data to anyone.
5. International transfers
Our own server is in Singapore, but some providers process data outside Singapore: Google (Analytics, with your consent, and the PageSpeed API) is a US company operating globally and states that it is certified under the EU-US Data Privacy Framework, and the AI providers described in section 4 also operate globally. Where personal data leaves Singapore we take steps to ensure it is protected to a standard comparable to the PDPA, including relying on these providers' contractual data protection commitments. Where personal data is transferred out of the EU or UK, we rely on the transfer safeguards in those providers' data processing terms - typically the European Commission's standard contractual clauses, with the UK addendum where applicable - or on an adequacy decision or framework certification where one applies.
6. Retention
Server logs are rotated automatically and deleted once they are no longer needed for security, abuse prevention and rate limiting, which is normally a matter of days rather than months. Scan history is kept while the Service operates so trends keep working; it describes the scanned website, not the visitor. If a URL you control appears in our scan history and you want it removed, contact us and we will delete it. Emailed reports are sent and not retained in a mailing list.
7. Your rights (PDPA)
Under the PDPA you may ask what personal data we hold about you, ask for corrections, or withdraw consent (for example, for analytics). Because the Service is account-free, we hold very little that can identify you - but for any request, contact our designated Data Protection Officer at contact@wunderfauks.com. We will respond as soon as reasonably practicable, and in any event within the time applicable law allows (normally 30 days), or tell you when to expect a reply if we need longer.
8. Visitors from the EU and UK
If you visit from the EU or UK, the GDPR (or UK GDPR) also applies to you. Our legal bases are: consent for analytics cookies (which you may withdraw at any time, as easily as it was given, via Cookie preferences); legitimate interests for security logs and rate limiting (keeping a free service available and abuse-free); and contract (taking the steps you request) when you run a scan or ask for an emailed report. You additionally have the rights to erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority. Contact for all of these: contact@wunderfauks.com.
9. Children
The Service is a website analysis tool intended for adults and businesses, and our Terms of Use require users to be at least 18. It is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data - for example an email address - contact us and we will delete it.
10. Visitors from other countries
Wherever you are in the world, we apply the same standard of protection described in this policy: analytics runs only with your consent, we collect the minimum needed to run a free tool, and we do not sell or rent personal data or use it for advertising or profiling. In particular, we do not “sell” or “share” personal information as those terms are defined in California law. Whoever you are and wherever you live, you may ask what personal data we hold about you, ask for it to be corrected or deleted, or withdraw consent, using the contact details below - we honour these requests globally, not only where a law requires it. If the privacy law of your country or state gives you additional rights, nothing in this policy takes them away.
11. Changes
If our data practices change, this page changes with them and the date above is updated.
12. Contact
Wunderfauks Group Pte Ltd · 68 Kallang Pudding Road, #06-04, Singapore 349327 · contact@wunderfauks.com · wunderfauks.com
See also: Terms of Use