Privacy policy

Last updated 28 September 2026

Scoreling is run by Alex Kay, an individual established in the Socialist Republic of Vietnam. Questions, requests and complaints about your data go to [email protected]. A postal address is available on request.

What we keep, and why

When you check a page

We keep the address you checked, the report, and for 30 days the page's HTML and speed data (after that only the scores and findings stay). Checking a page needs no account, and the report is not linked to you. Your IP address is used in memory to limit how many checks one address can run, and our web server logs it with each request; those logs are deleted after 7 days.

When you have an account

Your email address and when you last signed in. If you sign in with Google, Google tells us your email address and nothing else we store. For agencies, also what you enter in your account: agency name, website, contact email, logo, colours, report texts, widget settings, webhook addresses and the email addresses of clients you set up monitoring for. API keys are stored only as a hash.

When you use an agency's widget

Agencies put the Scoreling widget on their own sites. When you fill it in, we receive the address you want checked, your email address, any other fields the agency asked for (name, phone, company, keyword), your IP address and, if the agency shows a consent checkbox, when you ticked it. We run the check and pass all of this to that agency: by email, in its account, and to its webhook if it set one.

For this data the agency decides what happens to it and we act on its behalf: the agency is the controller, Scoreling is its processor. To ask what an agency does with your details, or to have them removed, contact the agency first; you can also write to us and we will delete them from Scoreling. We keep widget submissions while the agency's account exists.

Cookies and browser storage

One cookie keeps you signed in, for up to 90 days or until you sign out. Signing in with Google sets a second cookie for 10 minutes to protect that step. The widget remembers in your browser's session storage that its popup was already shown, so it does not open again on the next page. There are no advertising cookies, and nothing tracks you across sites.

We count visits to the public pages of scoreling.com with Trafnova, analytics we run ourselves. It sets no cookies. It keeps the page and its title, the referring site, screen size, language, browser and device type, and a location (country, region, city) worked out from the IP address. The IP address itself is not stored: visits are counted by a one-way hash of it with the browser, salted afresh every day, so a visitor cannot be followed from one day to the next. It never runs on reports, sign-in links, the widget or your account, and the address of a page you check is cut from what it records.

Who else handles data

• Serverel, which hosts our server in the Netherlands, where the database lives.
• Cloudflare, which sits in front of scoreling.com to deliver it and keep attacks out, so every request passes through it, IP address included.
• Maileroo, which delivers our emails (sign-in links, lead notifications, monitoring reports), so it sees the recipient and the message.
• Trafnova, our own analytics service on our own server, for the visit counts above.
• Google: the address of every page checked goes to Google's PageSpeed Insights for the speed figures, and Google handles the sign-in if you choose "Sign in with Google".

Error reports go to our own error tracker on our own server. We do not sell data, show ads, or share data with anyone else unless the law requires it.

Your rights

You can ask for a copy of your data, have it corrected, or have your account and everything in it deleted: write to [email protected] from the address on the account. We answer within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority.

Changes

When this policy changes, the date at the top changes with it. If a change affects how we use data you already gave us, account holders get an email first.