Privacy Policy
Last updated: 12 June 2026
1. Who we are
SERP.tools is operated by Anton Shaban, based in Warsaw, Poland (the Controller). If you have questions about this policy, contact us at: [email protected].
This policy applies to all users of serp.tools and covers how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Polish data protection law.
2. Data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, first name | Account creation, login, and communication about your account | Contract (Art. 6(1)(b) GDPR) |
| Tool usage events (tool name, action type, timestamp) | Understanding how tools are used to improve them; shown in your personal history | Legitimate interest / Consent for analytics cookies |
| Roadmap votes and feature suggestions | Prioritising which features to build next | Legitimate interest |
| Thumbs feedback and optional comments | Identifying and fixing problems with individual tools | Legitimate interest |
| IP address, browser/device type, country | Security, abuse prevention, and aggregate usage analytics | Legitimate interest |
We do not sell your data, use it for advertising, or build individual behavioural profiles for any purpose other than improving the service.
3. Third-party processors
We use the following sub-processors. Each processes data only under our instructions and under a Data Processing Agreement.
| Processor | Purpose | Location |
|---|---|---|
| Clerk | User authentication, session management, account deletion | USA (SCC) |
| Google Analytics 4 | Aggregate usage analytics (with Consent Mode v2 — cookieless in denied state) | USA (SCC) |
| PostHog EU | Product analytics and session insights — only after consent; EU region | EU (Frankfurt) |
| Cloudflare | CDN, DDoS protection, DNS resolution | EU/USA (SCC) |
| Replit | Application hosting and infrastructure | EU (Frankfurt, Germany) |
SCC = EU Standard Contractual Clauses, providing an adequate safeguard for transfers outside the EEA (applies to Clerk and Google Analytics).
4. Cookies
We use a small number of cookies. Essential cookies (login session) are necessary for the service to function and do not require consent. Analytics cookies are set only after you accept via the cookie banner. See our full Cookie Policy for details and a complete cookie inventory.
5. How long we keep your data
- Account data (email, first name): until you delete your account, or 2 years after your last login if the account is inactive.
- Tool usage history: up to 30 days, displayed in your personal history page.
- Roadmap votes and feature suggestions: retained until you delete your account.
- Analytics data (GA4, PostHog): governed by each provider's retention settings (GA4: 14 months by default; PostHog: 1 year).
- Server access logs: 30 days for security purposes.
6. Your rights (GDPR)
If you are in the EU, EEA, UK, or Switzerland, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate data.
- Erasure: Delete your account via your account settings (UserButton → Security → Delete account). This removes all your personal data from our systems within 30 days.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interest.
- Withdraw consent: Withdraw analytics consent at any time via the Cookie settings link in the footer.
To exercise any right, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish data protection authority (UODO, uodo.gov.pl).
7. Minimum age
SERP.tools is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact [email protected] and we will delete it promptly.
8. Changes to this policy
We may update this policy as the service evolves. Material changes will be announced on the site. The "Last updated" date at the top always reflects the current version. Continuing to use SERP.tools after changes are posted constitutes acceptance of the updated policy.
9. Governing law
This policy is governed by Polish law and the GDPR. Any disputes shall be resolved in the courts of Warsaw, Poland.