Privacy Policy

What we collect, why, and how long we keep it, in plain language.

1. Overview

MarketingPatcher is a small, single-operator service. This policy covers the site itself and the SEO & AI visibility audit tool. We collect the minimum needed to run the audit, prevent abuse, and let you sign in, and nothing more.

This document explains what happens when you audit a URL, when you create an account, and when you simply browse the site. For the legal entity behind MarketingPatcher, see the Imprint.

2. Who is responsible

Responsible for data processing on this website (the "controller" under GDPR):

Service Provider

MarketingPatcher - A service by Jesse Khala

Address

Scanbox #11417
Ehrenbergstr. 16a
10245 Berlin
Germany

Contact

Email:

No Data Protection Officer is legally required for this business and none has been appointed.

3. The audit tool: what we store

When you run an audit, we fetch the page, its robots.txt, and its llms.txt, then generate a report of scores and findings.

  • Stored: the audited URL, the resulting scores and findings (as a report), and a shareable report ID. If you're logged in, the report is linked to your account.
  • Not stored: the page's raw HTML. It's fetched, parsed in memory to build the report, and discarded.
  • IP address: we don't store it in plain text. It's converted to a one-way HMAC hash purely to enforce a rate limit (5 audits per IP per day) so the free tool isn't abused. The hash can't be reversed back to your IP.

Legal basis: legitimate interest in providing the tool and preventing abuse (Art. 6 para. 1 lit. f GDPR).

4. Creating an account

Sign-in uses passwordless email magic links, we never ask for or store a password. Creating an account processes:

  • Your email address, used to send the login link and identify your account.
  • A session token stored in a cookie, so you stay signed in.
  • The audit reports you generate while signed in, linked to your account.

This data is kept for as long as your account exists and is deleted if you ask us to delete your account. Legal basis: performance of a contract (Art. 6 para. 1 lit. b GDPR).

5. Service providers we use

We keep our stack small on purpose. These are the only third parties that process data on our behalf:

Cloudflare (hosting, database)

The site, its edge functions, and its database (Cloudflare D1) run on Cloudflare's network. Cloudflare, Inc., San Francisco, CA, USA. Cloudflare's server logs (IP, browser type, timestamp) are generated automatically for every request, this is standard technical operation of any website. Legal basis: legitimate interest in a secure, reliable service (Art. 6 para. 1 lit. f GDPR).

Resend (email delivery)

Login links are sent through Resend. Your email address is passed to Resend solely to deliver that message. Resend, Inc., San Francisco, CA, USA. Legal basis: performance of a contract (Art. 6 para. 1 lit. b GDPR).

We don't run third-party analytics, advertising pixels, or tracking cookies on this site.

6. Cookies

We use one cookie: a session cookie set when you sign in, so the site knows you're logged in. It's strictly necessary for the service to function and isn't used for tracking or advertising, so it doesn't require a consent banner under GDPR/ePrivacy.

7. Your rights

Under the GDPR you have the right to access, correct, or delete your personal data, restrict or object to its processing, and receive it in a portable format (Art. 15-20 GDPR). To exercise any of these, email .

You also have the right to lodge a complaint with a supervisory authority. The one responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Friedrichstr. 219

10969 Berlin

8. Changes to this policy

If our tools or providers change, we'll update this page. The version that applies is always the one live at the time of your visit.

Last updated: September 8, 2026