1. Data Controller
2. What Data We Collect and Why
Usage & analytics data
What: Pages visited, browser type, device type, approximate location (country/region), time on site.
Why: To understand how the Service is used and improve it.
Legal basis (GDPR Art. 6): Legitimate interests (Art. 6(1)(f)) — improving the Service; or Consent (Art. 6(1)(a)) where required.
Collected by: Google Analytics (anonymised IP addresses).
Scan data
What: URL submitted, pages crawled, performance metrics, resulting scores and recommendations.
Why: To provide the core scanning service and display results.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — providing the service you requested.
Collected by: Stored in our TiDB database. URLs are also sent to Google PageSpeed Insights API for performance analysis.
Account & billing data
What: Email address, name (via Clerk authentication), Stripe customer ID, subscription plan.
Why: To manage your account, process payments, and deliver premium features.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — fulfilling your subscription; Consent (Art. 6(1)(a)) for optional email notifications.
Collected by: Clerk (authentication), Stripe (payments), our database.
Scheduled scan emails
What: Email address, scan results, score deltas.
Why: To send scheduled scan digests if you have enabled them.
Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a)) — you explicitly enable scheduled scans.
Collected by: Sent via Gmail SMTP. You can disable at any time from your Account page.
Data stored locally on your device
What: Theme preference, color scheme, layout setting, cookie consent state.
Why: To remember your preferences between visits.
Legal basis (GDPR Art. 6): Strictly necessary — this data never leaves your device.
Collected by: Browser localStorage only. Not transmitted to our servers.
Contact form
What: Your name, email address, subject, message content.
Why: To respond to your enquiry.
Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a)) — by sending us a message, you consent to us processing it to reply.
Collected by: Sent via email. Deleted within 12 months of your enquiry being resolved.
AI-powered features
What: Page content excerpts sent to AI models for analysis. No personal data is included — only publicly accessible page content from scanned URLs.
Why: To provide AI-powered fix recommendations, AI content detection, and keyword opportunity analysis.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — providing the scanning features you requested.
Collected by: Processed by Google Gemini and Groq APIs. Content is not stored by these providers beyond the API request lifecycle.
Advertising data
What: Anonymised page impressions, ad clicks, and browsing behaviour on adgatescore.com.
Why: To serve relevant advertisements and fund the free tier of the Service.
Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a)) — advertising cookies require your opt-in via our cookie banner.
Collected by: Google AdSense, Media.net, and Carbon Ads. Each provider has its own privacy policy (linked in Section 6).
Push notifications
What: Browser push notification subscription token, notification preferences.
Why: To send you scan completion alerts and score change notifications if you have opted in.
Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a)) — you explicitly subscribe to push notifications.
Collected by: Stored in our database. You can unsubscribe at any time from your browser settings or Account page.
Community forum
What: Forum posts, replies, upvotes, and display name.
Why: To power the community forum and display your contributions.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — providing the forum feature; Legitimate interests (Art. 6(1)(f)) — maintaining community quality.
Collected by: Stored in our database. Posts are publicly visible. You can delete your posts from the forum.
Chrome extension
What: Active tab URL when you initiate a scan. No browsing history is collected.
Why: To scan the website you request from the extension.
Legal basis (GDPR Art. 6): Contract performance (Art. 6(1)(b)) — performing the scan you initiated.
Collected by: URL is sent to our scan API. The extension does not collect data in the background.
3. Cookies
We use cookies as summarised below. Non-essential cookies require your prior consent, which we obtain via our cookie banner. For full details, see our Cookie Policy.
| Cookie type | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Authentication (Clerk), theme preference, cookie consent state | No — essential for the Service |
| Analytics (Google Analytics) | Understand site usage, improve content | Yes — opt-in |
| Advertising (AdSense, Media.net, Carbon Ads) | Serve relevant ads, fund the free tier | Yes — opt-in |
You can withdraw consent at any time via the cookie banner or by clearing cookies in your browser. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout.
4. International Data Transfers
5. Your Rights Under GDPR
As an EU/EEA resident you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Request that we limit how we process your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Withdraw consent at any time without affecting prior processing.
To exercise any right, email [email protected]. We will respond within 30 days (GDPR Art. 12(3)).
6. Third-Party Processors
We use the following processors, each bound by data processing agreements:
7. Affiliate Links & Advertising
8. Data Retention
9. Your Rights Under CCPA (California Residents)
If you're a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:
You can request what personal information we've collected, used, or shared about you.
You can request deletion of your personal information, subject to certain exceptions.
We do not sell your personal information. However, our use of advertising cookies may constitute a "sale" under CCPA's broad definition. You can opt out via our cookie consent banner or by contacting us.
We will not discriminate against you for exercising your CCPA rights.
To exercise any CCPA right, email [email protected] with the subject "CCPA Request." We'll respond within 45 days.
10. Google Consent Mode v2
We use Google Consent Mode v2 to adjust how Google's advertising and analytics tags behave based on your cookie consent choices. When you decline non-essential cookies, Google tags operate in restricted mode — no cookies are set, but Google may use aggregated and modeled data for conversion attribution. This helps us maintain the free tier of our service while respecting your consent choices. You can change your consent at any time via the cookie banner.
11. Children's Privacy
12. Changes to This Policy
13. Contact
AdGateScore is operated by Salima Pradhan.
Privacy enquiries: [email protected] · General contact: Contact page