Privacy policy

Last updated 26 October 2026

This policy explains what SERPcred (serpcred.com) collects, why, and what you can do about it.

What we collect

• From Google sign-in: your name, email address and Google account ID.
• From Search Console, with your permission: an access token (stored encrypted), the list of properties in your account with your permission level for each, and daily total clicks, impressions and average position for the properties you choose to publish.
• When you use the site: a session cookie that keeps you signed in, cookieless analytics (pages viewed and referring sites, not tied to you), and a log of clicks on outbound links (which link and the referring site, without your IP address).
• If you fill in a founder profile (optional): the name and X handle you enter, and the public X profile picture for that handle. If you link your X account by signing in to X, we store its X user ID and take the handle from X. We don't keep any X access token.
• If you report a listing: your message and, if you give it, your email address.
• If you claim a domain listed by another account: your message, linked to your account. To check the claim, we ask Google again whether your account has owner or full access to that domain.

We never collect search queries, page URLs or any other Search Console report data.

How we use it

To verify and publish the totals you chose, compute rankings, run and secure the service, and answer you. We don't sell your data, use it for advertising, or use it to train AI models.

What is public

For each site you publish: its domain, display name, category, favicon (copied from the site itself, or from Google's favicon service when the site has none we can use), daily totals and ranks. If you fill in a founder profile, the name, X handle and picture from it are shown next to your sites until you clear them. Your Google account name and email address are never shown.

With a founder profile, you also get a public profile page that lists your published sites together. A linked X account is marked as linked there and next to your sites.

Google user data

SERPcred's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

Only the service providers that run SERPcred for us (hosting and analytics), under contract, and authorities when the law requires it. To get the X profile picture for your handle, typed or linked, we send that handle, and nothing else, to unavatar.io.

How long we keep it

For as long as your account exists, including the totals of sites you unpublish. When you delete your account on the My sites page, we revoke our access at Google, sign you out everywhere, and delete your account, your sites, their daily totals and ranks, the property list we logged, your claims and your profile picture right away. If we move a listing to another account that proves access to its domain, the site and its daily totals go with it. Copies in backups disappear when those backups expire.

Your rights

On the My sites page you can download a copy of your data as JSON, rename or recategorize a site, unpublish it, or delete your account at any time. You can also email us to ask for any of these, or to correct your data. Depending on where you live, you can also complain to your data protection authority (for example in the EU or UK, Québec's Commission d'accès à l'information, or the Office of the Privacy Commissioner of Canada).

Where data is stored

Data is stored with our hosting provider and may be processed outside your country.

Children

SERPcred is not intended for anyone under 16.

Changes and contact

We'll update the date at the top when this policy changes. The person in charge of protecting personal information is SERPcred's founder: [email protected].