Privacy Policy

1. Introduction

Yet Another SEO App ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services.

2. Information We Collect

We may collect the following types of information:

• Account information: Email/password accounts store your email and a password hash. Google sign-in provides your name, email address and profile picture.
• Scan data: The URLs you analyze and the resulting SEO scores are stored to provide your scan history and dashboard features.
• Image projects: Saved projects contain page URLs, image reports, small thumbnails, reviewed alt text, filenames, export settings and export records.
• Usage data: If you allow analytics, Google Analytics receives page and feature events, browser information and pseudonymous identifiers. We exclude image contents, alt text, project names and URL query parameters from these events.
• Local storage: For guest users, scan history and monthly scan counts are stored locally in your browser.

3. How We Use Your Information

• To provide and maintain the SEO analysis service
• To store your scan history and display score trends in your dashboard
• To enforce scan limits on free accounts
• To improve our service and user experience
• To communicate important updates about the service

4. Data Storage & Security

The application runs on Railway and stores account, session and saved project data in Neon PostgreSQL. Connections use HTTPS. Uploaded original images and unsaved audits are held in temporary server memory for up to 15 minutes and can be removed sooner on restart or when capacity is reached. Saved reports, thumbnails and edits remain until you request their deletion; archiving a project does not delete it. We do not sell your personal information.

5. Cookies & Local Storage

Essential session cookies keep you signed in. Browser storage keeps preferences, general scan history and counts, short-lived image drafts and checkout attribution. Google Analytics is off until you explicitly allow analytics. Ignoring the banner is not consent. Select Disable analytics to stop further measurement and remove analytics cookies. Advertising choices are separate and are managed through Google’s certified consent message. We save your refusal in this browser and respect it on later visits. Previously sent events are not recalled. You can reopen Cookie preferences in the footer at any time to disable or re-enable analytics. Clearing browser storage removes the saved preference; a different browser has its own preference.

6. Third-Party Services

Google handles optional Google sign-in and reCAPTCHA anti-abuse checks. Stripe processes payments and billing details; yaSEO stores Stripe customer and subscription references, rather than card numbers. Railway and Neon provide hosting and database services. These providers process information required to deliver those services under their own privacy terms.

Google Analytics events, collected only after you allow analytics, help us understand tool use and completed purchases. Automatic form capture and session recordings are disabled. Other SEO tools may send a requested public URL to Google PageSpeed, or text you choose to optimize to the configured Gemini or Groq provider. Image compression itself runs on the yaSEO server.

When you choose Suggest alt text, we send a resized copy of that image and the optional page context to Google Gemini to produce a draft. We do not send your account email or your full page HTML with that request. Review the draft before using it. Google processes these requests under its Gemini API terms. AI suggestions are optional; writing your own alt text does not send images to an AI provider.

We keep generated drafts for up to 30 days for retry recovery, and retain request identifiers, image/context hashes, timestamps and token counts to enforce allowances and prevent abuse. Drafts copied into saved projects remain with those projects. Original uploads still expire after 15 minutes. You can request deletion of your account and associated data.

7. Your Rights

• Access your personal data through your dashboard
• Request deletion of your account and associated data
• Clear your local scan history at any time
• Change your analytics and advertising choices using Cookie preferences and Advertising privacy choices in the footer

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Changes to this notice do not automatically grant consent to optional analytics or advertising.

9. Contact Us

If you have questions about this Privacy Policy, please visit our Contact page to get in touch.

10. Advertising

We use Google AdSense to support selected public blog and free-tool pages. Signed-in Pro accounts do not receive ads. Advertising scripts are not loaded while account status is unknown or on the homepage, dashboard, checkout, login or private reports.

Google and its advertising partners may process IP addresses, browser and device information, cookie identifiers and interactions with ads to deliver, measure and prevent fraud in advertising. Where consent is required, advertising waits for your choice in Google’s certified consent message. You can refuse or change your choices through Advertising privacy choices in the footer. Refusing optional advertising does not prevent you from using our tools.

Google may use cookies for personalized advertising based on visits to this and other websites. Learn how Google uses information from partner sites, read Google’s privacy policy, and manage personalization in My Ad Center. Browser settings can remove cookies already stored on your device; our site cannot remove cookies belonging to another domain.