1. Data Controller
2. What Data We Collect and Why
Usage & analytics data
What: Pages visited, browser type, device type, approximate location (country/region), time on site.
Why: To understand how the Service is used and improve it.
Legal basis (GDPR Art. 6): Legitimate interests (Art. 6(1)(f)) — improving the Service; or Consent (Art. 6(1)(a)) where required.
Collected by: Google Analytics (anonymised IP addresses).
Scan data
What: URL submitted, pages crawled, performance metrics, resulting scores and recommendations.
Why: To provide the core scanning service and display results.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — providing the service you requested.
Collected by: Stored in our TiDB database. URLs are also sent to Google PageSpeed Insights API for performance analysis.
Account & billing data
What: Email address, name (via Clerk authentication), Stripe customer ID, subscription plan.
Why: To manage your account, process payments, and deliver premium features.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — fulfilling your subscription; Consent (Art. 6(1)(a)) for optional email notifications.
Collected by: Clerk (authentication), Stripe (payments), our database.
Scheduled scan emails
What: Email address, scan results, score deltas.
Why: To send scheduled scan digests if you have enabled them.
Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a)) — you explicitly enable scheduled scans.
Collected by: Sent via Gmail SMTP. You can disable at any time from your Account page.
Data stored locally on your device
What: Theme preference, color scheme, layout setting, cookie consent state.
Why: To remember your preferences between visits.
Legal basis (GDPR Art. 6): Strictly necessary — this data never leaves your device.
Collected by: Browser localStorage only. Not transmitted to our servers.
Contact form
What: Your name, email address, subject, message content.
Why: To respond to your enquiry.
Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a)) — by sending us a message, you consent to us processing it to reply.
Collected by: Sent via email. Deleted within 12 months of your enquiry being resolved.
3. Cookies
We use cookies as described below. Non-essential cookies require your prior consent, which we obtain via our cookie banner.
| Cookie type | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Theme preference, cookie consent state | No — essential for the Service |
| Analytics (Google Analytics) | Understand site usage, improve content | Yes — opt-in |
You can withdraw consent at any time by clearing cookies in your browser. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
4. International Data Transfers
5. Your Rights Under GDPR
As an EU/EEA resident you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Request that we limit how we process your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Withdraw consent at any time without affecting prior processing.
To exercise any right, email [email protected]. We will respond within 30 days (GDPR Art. 12(3)).
6. Third-Party Processors
We use the following processors, each bound by data processing agreements:
7. Affiliate Links
8. Data Retention
9. Children's Privacy
10. Changes to This Policy
11. Contact
AdGateScore is operated by Salima Pradhan.
Privacy enquiries: [email protected] · General contact: Contact page