What happens when you paste a URL.

We process enough information to deliver the audit, prevent abuse, and keep the service reliable. We do not ask for a profile, billing details, or access to Search Console for the current free product.

A submitted domain tells our servers what to fetch. Checks are limited to publicly reachable pages and public infrastructure records; we do not sign in to the target website.

Audit results are published at predictable /audit/[domain] URLs. Anyone with the link can open the report. Treat it as public and do not submit a domain if you do not want its publicly observable technical signals summarized this way.

A shareable URL is not the same as broad search distribution. Newly generated and random reports default to noindex,follow, and our sitemap includes only a small curated set of example domains. Search engines and third parties ultimately control their own crawling and caches.

The “Recent audits” convenience list is stored in your browser using local storage. It helps you return to domains you checked without creating an account. This list stays on that browser and can be removed with the Clear action or by clearing site data in your browser settings.

Theme preference may also be stored locally so dark or light mode persists between visits.

Like most hosted web services, our infrastructure may record IP address, user agent, timestamps, requested paths, submitted domains, response codes, and diagnostic errors. We use these records to apply rate limits, investigate failures, prevent abuse, and maintain security.

Do not place passwords, API keys, personal messages, or other secrets in a URL submitted for audit. URLs can be included in request logs and the resulting report.

The current free product does not embed third-party advertising and does not sell personal information. We may use technically necessary storage for product behavior and security.

If we add audience analytics, accounts, advertising, or paid features that materially change this data use, this policy will be updated before those practices are described as current.

Hosting, networking, DNS resolution, certificate inspection, and public RDAP services help us deliver an audit. Those providers may process request metadata under their own privacy terms and security practices. We disclose only what is reasonably needed to make the requested check operate.

Fetching a target website also reveals our server request to that website and its hosting or security providers, just as any web crawler request would.

Audit results may be cached to make repeated checks faster and protect free upstream services. Shareable report routes can continue to regenerate a current public-data snapshot when visited.

Operational logs are kept only as long as reasonably needed for security, abuse prevention, debugging, and infrastructure requirements. Backups and provider logs may expire on separate schedules.

• Do not submit a URL you do not want summarized.
• Clear recent audits from the homepage or browser storage.
• Use your site’s robots.txt and access controls to express crawler policy.
• Contact us about a report, log, correction, or deletion request.

For a request involving a domain report, include its full URL and be prepared to demonstrate reasonable control of the domain. Legal privacy rights vary by location; we will assess applicable requests based on the information involved.

This page will change as the product evolves. The date and version at the top identify the current policy. Material changes will be reflected here, especially before introducing accounts, payments, or materially different tracking.

Email hello@theseosoul.com with privacy questions or requests. Include the report URL or domain when relevant, but do not send passwords or identity documents unless we specifically request a safe verification method.