What we collect, why, and how long we keep it, in plain language.
1. Overview
MarketingPatcher is a small, single-operator service. This policy covers
the site itself and the SEO & AI visibility audit tool. We collect the
minimum needed to run the audit, prevent abuse, and let you sign in, and
nothing more.
This document explains what happens when you audit a URL, when you create
an account, and when you simply browse the site. For the legal entity
behind MarketingPatcher, see the Imprint.
2. Who is responsible
Responsible for data processing on this website (the "controller" under GDPR):
Service Provider
MarketingPatcher - A service by Jesse Khala
Address
Scanbox #11417 Ehrenbergstr. 16a 10245 Berlin Germany
Contact
Email:
No Data Protection Officer is legally required for this business and none
has been appointed.
3. The audit tool: what we store
When you run an audit, we fetch the page, its robots.txt, and
its llms.txt, then generate a report of scores and findings.
Stored: the audited URL, the resulting scores and findings
(as a report), and a shareable report ID. If you're logged in, the report
is linked to your account.
Not stored: the page's raw HTML. It's fetched, parsed in
memory to build the report, and discarded.
IP address: we don't store it in plain text. It's converted
to a one-way HMAC hash purely to enforce a rate limit (5 audits per IP per
day) so the free tool isn't abused. The hash can't be reversed back to your
IP.
Legal basis: legitimate interest in providing the tool and preventing abuse
(Art. 6 para. 1 lit. f GDPR).
4. Creating an account
Sign-in uses passwordless email magic links, we never ask for or store a
password. Creating an account processes:
Your email address, used to send the login link and identify your account.
A session token stored in a cookie, so you stay signed in.
The audit reports you generate while signed in, linked to your account.
This data is kept for as long as your account exists and is deleted if you
ask us to delete your account. Legal basis: performance of a contract (Art. 6
para. 1 lit. b GDPR).
5. Service providers we use
We keep our stack small on purpose. These are the only third parties that
process data on our behalf:
Cloudflare (hosting, database)
The site, its edge functions, and its database (Cloudflare D1) run on
Cloudflare's network. Cloudflare, Inc., San Francisco, CA, USA.
Cloudflare's server logs (IP, browser type, timestamp) are generated
automatically for every request, this is standard technical operation
of any website. Legal basis: legitimate interest in a secure, reliable
service (Art. 6 para. 1 lit. f GDPR).
Resend (email delivery)
Login links are sent through Resend. Your email address is passed to
Resend solely to deliver that message. Resend, Inc., San Francisco, CA,
USA. Legal basis: performance of a contract (Art. 6 para. 1 lit. b
GDPR).
We don't run third-party analytics, advertising pixels, or tracking
cookies on this site.
6. Cookies
We use one cookie: a session cookie set when you sign in, so the site
knows you're logged in. It's strictly necessary for the service to
function and isn't used for tracking or advertising, so it doesn't
require a consent banner under GDPR/ePrivacy.
7. Your rights
Under the GDPR you have the right to access, correct, or delete your
personal data, restrict or object to its processing, and receive it in a
portable format (Art. 15-20 GDPR). To exercise any of these, email .
You also have the right to lodge a complaint with a supervisory
authority. The one responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
8. Changes to this policy
If our tools or providers change, we'll update this page. The version
that applies is always the one live at the time of your visit.