1

Summary

RankSEO is an on-demand SEO/AEO/GEO analysis tool. It analyses the page you are actively viewing when you ask it to and shows the results to you.

RankSEO does not run any analytics, advertising, or data-collection server of its own. We do not sell, rent, or share your data.

Category What Where it goes Stored?
Page content you analyse URL, title, meta tags, headings, links, image attributes, visible text of the active tab Processed locally; optionally sent to third-party services you configure Session memory only
API keys & settings Keys for PageSpeed, AI providers, SEO data providers, and your WP-X-MCP endpoint chrome.storage.local; a small subset via chrome.storage.sync On your device / Chrome sync
Reports & SERP exports you download Markdown/PDF audits; Multi-Page SERP Excel, CSV, or JSON you choose to export Saved by you to your computer via the browser download prompt Local file only
Prompts Library text Built-in SEO prompt templates shown in the Prompts tab Ships with the extension; copy stays on your device On device only

We do not collect browsing history, keystrokes, passwords, location, or PII beyond what you explicitly submit to a third-party API you configured.


2

Overview

This Privacy Policy describes how RankSEO — AEO & GEO Expert ("the Extension," "we," "our") handles information when you use our Chrome browser extension. The Extension is developed and maintained by Mubashir Hassan.

The short version: RankSEO does not collect, store, transmit, or sell your personal data. All page analysis happens locally in your browser. Your data stays with you.

By installing and using the Extension, you agree to the practices described in this policy. If you do not agree, please uninstall the Extension from your browser.


3

Data We Handle

RankSEO is designed with a privacy-first architecture. Here is a complete breakdown of what data is and is not collected:

We do NOT collect:

  • Your name, email address, or any personally identifiable information
  • Browsing history or URLs of pages you visit
  • Page content, text, or HTML from websites you analyze
  • Cookies, session data, or authentication tokens from any website
  • Analytics or telemetry about how you use the Extension
  • Crash reports or error logs sent to our servers
  • Any data synced to external databases or cloud services operated by us

What stays on your device: All SEO analysis — headings, images, links, keywords, metadata, readability scores, CRO checks — is computed locally inside your browser using the currently active tab. Nothing leaves your device.


4

Extension Permissions

RankSEO requests the following Chrome permissions. Each permission has a specific, limited purpose:

Permission Why It's Needed
activeTab Access the content of the currently open tab when you click the extension icon. The Extension only reads the active page — never background tabs or other windows.
scripting Inject a content script into the active tab to extract SEO data (headings, images, links, meta tags, structured data) for analysis. No data is sent externally.
storage Save your extension settings (theme preference, AI configuration) locally in Chrome's storage so your preferences persist between sessions. Data is stored on your device only.
downloads Used only when you export a report or Multi-Page SERP results (PDF, Excel, CSV, or JSON). Files are generated in the browser and saved only after you click export. No automatic or background downloads.
notifications Optional status alerts when a Multi-Page SERP auto-scrape finishes, is stopped, or fails, so you can leave the panel closed during a long run. Not used for marketing or ads.

The Extension also declares host permissions for the following external APIs, which are only called when specific features are actively used by you:

  • rdap.org — Domain registration and WHOIS data (Domain Information panel)
  • pagespeedonline.googleapis.com / googleapis.com — Google PageSpeed / Core Web Vitals API
  • data.keywordseverywhere.com — Optional keyword data integration
  • publicapi.semrush.com — Moz-powered Domain Authority and backlink metrics
  • integrate.api.nvidia.com — AI chat via NVIDIA NIM (only when you configure and use AI Chat)
  • openrouter.ai — AI chat via OpenRouter (only when you configure and use AI Chat)

These external API calls send only the domain name or URL of the currently analyzed page to the respective service — never your personal information.


5

Third-Party Services

RankSEO can send the page URL and/or content to services you opt into by entering an API key or endpoint. Each is governed by its own privacy policy. If you do not configure a service, no data is sent to it.

  • Google PageSpeed / Google APIs — Fetches Core Web Vitals and performance scores for a given URL. See Google Privacy Policy.
  • RDAP / WHOIS (rdap.org and registry RDAP endpoints) — Retrieves publicly available domain registration information for supported TLDs.
  • PKNIC-backed WHOIS helpers (e.g. whois.vu) — Used only for Pakistan .pk (and related) domains when public RDAP is unavailable, to show domain age and nameservers. Only the domain name is queried.
  • Internet Archive (web.archive.org) — Optional fallback first-seen date when registry WHOIS/RDAP has no creation date.
  • OpenAI — AI language model inference when you configure an OpenAI API key in settings.
  • Anthropic — AI language model inference when you configure an Anthropic API key in settings.
  • Google Gemini — AI language model inference when you configure a Gemini API key in settings.
  • Perplexity — AI-powered search and summarisation when you configure a Perplexity API key.
  • xAI — AI language model inference when you configure an xAI API key in settings.
  • OpenRouter — AI chat via OpenRouter (only when you configure and use AI Chat). See OpenRouter's Privacy Policy.
  • NVIDIA NIM — AI chat via NVIDIA NIM (only when you configure and use AI Chat). See NVIDIA's Privacy Policy.
  • Firecrawl — Web scraping and content extraction when you configure a Firecrawl API key.
  • Semrush Public API — Provides Domain Authority and backlink data. See Semrush Privacy Policy.
  • Ahrefs — Optional backlink and SEO metrics when you configure an Ahrefs API key.
  • SimilarWeb — Optional traffic and audience insights when you configure a SimilarWeb API key.
  • Keywords Everywhere API — Optional keyword volume data. Only called if you have configured an API key in settings.
  • WordPress via WP-X-MCP — Communicates with your own WordPress site when you configure your WP-X-MCP endpoint. Data goes only to the server you specify.

We do not control, operate, or take responsibility for the data practices of these third-party services. We encourage you to review their respective privacy policies.


6

AI API Keys & AI Chat

The AI Chat feature is optional. To use it, you provide an API key from either NVIDIA NIM or OpenRouter. Here is exactly how your API key is handled:

  • Your API key is stored only in Chrome's local extension storage on your device using the storage permission.
  • Your key is never transmitted to our servers, logged, or shared with any party other than the AI provider you selected.
  • When you send a message in AI Chat, the request is sent directly from your browser to NVIDIA NIM or OpenRouter — it does not pass through any RankSEO-controlled server.
  • The context sent to the AI model includes only the SEO data extracted from the current page (headings, meta tags, scores, etc.) and your chat message. It does not include cookies, passwords, or personal information.
  • You can delete your stored API key at any time by clearing it in the Settings tab of the Extension, or by uninstalling the Extension.

Important: When you use AI Chat, your messages and the page's SEO data are processed by the AI provider (NVIDIA or OpenRouter) according to their terms of service. Please review NVIDIA's Privacy Policy and OpenRouter's Privacy Policy before use.


7

Local Storage

RankSEO uses Chrome's chrome.storage.local API to save the following data on your device only:

  • Your selected theme preference (Light / Dark / Auto)
  • Your AI model configuration — selected provider, model name, temperature, max tokens, and API key
  • AI Chat conversation history within the current session
  • Optional Multi-Page SERP scrape state and results until you clear them or uninstall

This data never leaves your device and is never synced to any cloud service or server operated by us. You can clear all stored data by uninstalling the Extension or clearing its storage via Chrome's extension settings.


8

No Tracking Policy

RankSEO contains zero tracking code. We do not use Google Analytics, Mixpanel, Segment, Sentry, or any other analytics or error-reporting service. We do not serve advertisements. We do not build user profiles. We do not monetize your usage data in any way.

This is a free, privacy-respecting developer tool. Our business model does not depend on your data.


9

Children's Privacy

RankSEO is intended for use by web developers, SEO professionals, marketers, and website owners. The Extension is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the Extension, please contact us and we will take appropriate steps.


10

Policy Changes

We may update this Privacy Policy from time to time as the Extension evolves. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify users via the Extension's settings panel or the Chrome Web Store listing.

Your continued use of the Extension after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.


11

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the Extension's data practices, please reach out:

General Email: hello@mubashirhassan.com
Company: Mubashir Hassan LLC
Chrome Web Store: RankSEO listing

We aim to respond to all privacy-related inquiries within 5 business days.