Privacy
notice

The check on the homepage

The check reads the website you enter and shows its visits from Google month by month, the Google updates rolling out when they fell and what Google shows of it today. If you leave your email for the full report, the report is sent to that address. When the day's checks are used up, the check takes your email instead and sends the result there once it has run, within a day.

Cloudflare protects and forwards the request, and Turnstile checks that a person asked. The address you enter and the public text of the site's homepage and a few of its pages are sent to OpenAI, which works out what the site is and writes the result; DeepSeek writes it when OpenAI does not answer. The site's domain and its name are sent to DataForSEO for its Google traffic history, the searches it ranks for and what Google shows for it. The address, the result and the data behind it are held in private local storage, and a random key kept in this browser tab's session storage lets a reload show the same result. Your connection's address limits how many checks it can run in a day and is kept only as a keyed hash, cleared the next day.

Enter a public website address, never a private document, an account link or an address carrying a password or a personal token.

The result can be opened for a day after the check, and the check's record leaves active storage after 30 days, or a year after you leave your email for the full report or for a check that runs later; restricted backups rotate out within 30 days more, and the search data DataForSEO returned stays in a local cache so a repeat check does not buy it again. An email you leave reaches Yan with the check it came from and is used only to send the report or the result you asked for and to answer you; it stays with that correspondence, which has no fixed deletion schedule.

DataForSEO's policy states that API task data is retained for 365 days. OpenAI's business terms and DeepSeek's API terms govern their processing; a record deleted here does not delete provider records.

The first check stays in the browser

The Google penalty checker does not connect to a Search Console account. Report selections and an optional daily Performance CSV are processed in the current browser tab. This site does not upload, store, or add them to an inquiry.

For a lower comparison after both reports are clean, the browser requests Google's public Search Status history with credentials and page referrer omitted. Google receives the ordinary network request needed to return that public file; the CSV and report selections are not included.

Controller

Yan Dobromyslov, Portugal, is the controller for this information. Privacy requests can be sent to info@seopenaltyremovalcompany.com.

What the form collects

The form records the fields you enter: name, email address, website when supplied, form location, and message. The required fields are needed to receive and assess the inquiry; sending the form is optional.

Cloudflare Turnstile separately processes network, browser, and request signals to distinguish people from automated abuse. Its verification token is checked and is not stored in the inquiry record or technical event log.

Purpose and legal basis

The information is used to run the check and send the report you ask for, to assess and reply to the business inquiry, administer any resulting discussion, and protect the check and the form from abuse. The legal basis is the legitimate interest in answering the requests people choose to make and keeping the service secure under Article 6(1)(f) GDPR.

The submission is not added to a newsletter or used for unrelated marketing. Automated anti-abuse checks may reject likely spam, but they do not make a legal or similarly significant decision about a person.

Processors and international processing

The active record lives in a private local SQLite database. Proton Drive stores end-to-end encrypted backup copies. Cloudflare protects and relays the form. Google delivers the acknowledgement, the minimal operator notification and the result of a check you asked to have emailed, and hosts the contact mailbox used for replies and rights requests.

These providers and their subprocessors may process information outside the European Economic Area. Depending on the provider and destination, applicable safeguards include European Commission standard contractual clauses, adequacy decisions, and the EU-US Data Privacy Framework. A copy of the applicable safeguards can be requested at the address above.

Retention

The submitted form record is deleted 12 months after submission. It may be deleted sooner when it is invalid, a test, contains inappropriate sensitive information, is no longer needed for the stated purpose, or a valid deletion or objection request applies. If work begins, only information needed for that work moves to separately governed client records.

Technical consult-event records contain no form contents and are deleted after 30 days. Google mailbox messages have no fixed automatic deletion schedule. Deleted information can remain temporarily in restricted disaster-recovery backups until the relevant backup expires; those copies are not used for ordinary operations.

Your rights

Depending on the circumstances, you may request access to, correction or deletion of your information, restriction of processing, or object to processing based on legitimate interests. Portability applies where its legal conditions are met. Identity may need to be verified before a request is completed.

You may also complain to Portugal's Comissão Nacional de Proteção de Dados or the data-protection authority where you live or work.