Privacy Policy

Last updated: 2 November 2026

What we collect

• Your order details, from the order form or an email: your tier, domain, competitor domains, a short description of your business and market, optional target searches, your delivery email and the payment method you choose. For a security audit, also your confirmation that you're authorized to have the site tested.
• Your IP address and country, read from the request when you submit the order form. The IP is used only to limit repeated submissions and is deleted automatically within 2 hours; the country is kept with the order.
• Payment information: your order number and the exact amount. For USDT, your transaction hash and the address you paid from. For PayPal, the details PayPal shows us about your payment, such as your name, PayPal email address, the amount, the date and your note. We use these to confirm payment and, if needed, refund you.
• Emails you send us and our replies.

We never ask for logins, passwords, or access to your analytics or Search Console.

What we look at

To produce your audit we only use publicly available information: your website and your competitors' websites, their sitemaps and robots.txt, public speed tests, public domain-ranking lists and public web pages in your niche.

How we use it

Only to produce and deliver your report, handle your revision or refund, and answer your questions. We don't sell, rent or share your information for marketing, and we don't add you to a mailing list.

How long we keep it

We delete your order details and the report file we keep 90 days after delivery. We may keep a minimal record of the payment (date, amount, transaction hash or PayPal transaction ID) for bookkeeping. A USDT transaction itself is permanently public on the Tron blockchain, and no one can delete it. PayPal keeps its own records of PayPal payments.

Free check tools

When you use the free SEO quick check or the free security headers check, our server loads the address you enter (one page, plus robots.txt and sitemap.xml for the SEO check, or public SPF and DMARC DNS records for the headers check). We keep the checked address and its results for 7 days so you can ask for them by email. To limit abuse we count checks per IP address; those counters contain your IP address and delete themselves within 2 hours. We get a short private Telegram notification with the checked domain, its score and your country (from Cloudflare), at most once an hour per domain.

If you ask us to email you the report, we store your email address, the checked address and its results for 90 days, only to send that report and answer your reply. We don't add you to a mailing list or share your email. We send the report by hand, usually within one business day.

Other free tools

The meta tag checker and canonical checker load the one page you enter; the robots.txt checker loads only that site's /robots.txt. We don't store the address or the results. To limit abuse we count checks per IP address, and those counters delete themselves within 2 hours. The meta tag checker's social preview shows the page's own preview image, which your browser loads directly from that site. The robots.txt generator runs entirely in your browser.

Advertising

We don't show ads today. We may add advertising to our free tools and guides in future, possibly from Google or another ad network. If we do, we'll update this policy before ads appear, explain which provider is used and whether it sets cookies, and ask for your consent where the law requires it. Our order pages will stay ad-free.

This website

This site uses Google Analytics 4, a service from Google, to count visits and see which pages and free tools are used. When a page loads, your browser fetches Google's analytics script and sends Google the page address (without any query string), the referring page, your browser, device and screen type, language, an approximate location derived from your IP address, and a random visitor ID. Google Analytics sets first-party cookies on audit.huutran.dev (_ga and _ga_QB7145F3TS) that last up to two years so repeat visits can be recognised. We have turned off Google signals and ad personalisation, we never send Google your name, email address or order details, and we only look at the reports in aggregate. Google processes this data under its own privacy policy (see also how Google uses information from sites that use its services) and may process it outside your country.

Opting out: install Google's Google Analytics opt-out browser add-on, block or delete cookies for audit.huutran.dev in your browser settings, or use a content blocker that blocks Google Analytics. Everything on the site, including the free tools and ordering, works the same with analytics blocked.

The order page and the free tools store nothing else in your browser; your order number is in the page link so you can come back to it, but we strip the query string before anything is sent to Google, so order numbers and the addresses you check are never shared with it. Our hosting provider, Cloudflare Pages, may keep standard server logs, such as IP addresses, for security and operations under its own privacy policy.

Service providers

We use Cloudflare to host this site and store order records, an email provider to receive and send email, Google Analytics for visit statistics (see above), and Telegram to notify us privately when a new order comes in (the notification includes the order details above) or when someone uses a free check or asks for its report. They process data only to provide those services.

If you pay with PayPal, PayPal processes the payment and receives your payment details (such as your card or bank details and PayPal account information) directly; we never see your card or bank details. PayPal handles that information under its own privacy statement.

Your choices

You can ask us at any time to see or delete the information we hold about you, and we'll do so unless we must keep a payment record. Email holicaudit@mail.grokbot.com.