1

Summary

RankSEO is an on-demand SEO/AEO/GEO analysis tool. It analyses the page you are actively viewing when you ask it to and shows the results to you.

RankSEO does not run any analytics, advertising, or data-collection server of its own. We do not sell, rent, or share your data.

Category What Where it goes Stored?
Page content you analyse URL, title, meta tags, headings, links, image attributes, visible text of the active tab Processed locally; optionally sent to third-party services you configure Session memory only
API keys & settings Keys for PageSpeed, AI providers, SEO data providers, and your WP-X-MCP endpoint chrome.storage.local; a small subset via chrome.storage.sync On your device / Chrome sync
Reports you export The Markdown/PDF report you choose to download Saved by you to your computer Local file only

We do not collect browsing history, keystrokes, passwords, location, or PII beyond what you explicitly submit to a third-party API you configured.


2

Overview

This Privacy Policy describes how RankSEO — AEO & GEO Expert ("the Extension," "we," "our") handles information when you use our Chrome browser extension. The Extension is developed and maintained by Mubashir Hassan.

The short version: RankSEO does not collect, store, transmit, or sell your personal data. All page analysis happens locally in your browser. Your data stays with you.

By installing and using the Extension, you agree to the practices described in this policy. If you do not agree, please uninstall the Extension from your browser.


3

Data We Handle

RankSEO is designed with a privacy-first architecture. Here is a complete breakdown of what data is and is not collected:

We do NOT collect:

  • Your name, email address, or any personally identifiable information
  • Browsing history or URLs of pages you visit
  • Page content, text, or HTML from websites you analyze
  • Cookies, session data, or authentication tokens from any website
  • Analytics or telemetry about how you use the Extension
  • Crash reports or error logs sent to our servers
  • Any data synced to external databases or cloud services operated by us

What stays on your device: All SEO analysis — headings, images, links, keywords, metadata, readability scores, CRO checks — is computed locally inside your browser using the currently active tab. Nothing leaves your device.


4

Extension Permissions

RankSEO requests the following Chrome permissions. Each permission has a specific, limited purpose:

Permission Why It's Needed
activeTab Access the content of the currently open tab when you click the extension icon. The Extension only reads the active page — never background tabs or other windows.
scripting Inject a content script into the active tab to extract SEO data (headings, images, links, meta tags, structured data) for analysis. No data is sent externally.
storage Save your extension settings (theme preference, AI configuration) locally in Chrome's storage so your preferences persist between sessions. Data is stored on your device only.
downloads Enable the PDF export and CSV/JSON download features when you choose to save an audit report to your computer.

The Extension also declares host permissions for the following external APIs, which are only called when specific features are actively used by you:

  • rdap.org — Domain registration and WHOIS data (Domain Information panel)
  • pagespeedonline.googleapis.com / googleapis.com — Google PageSpeed / Core Web Vitals API
  • data.keywordseverywhere.com — Optional keyword data integration
  • publicapi.semrush.com — Moz-powered Domain Authority and backlink metrics
  • integrate.api.nvidia.com — AI chat via NVIDIA NIM (only when you configure and use AI Chat)
  • openrouter.ai — AI chat via OpenRouter (only when you configure and use AI Chat)

These external API calls send only the domain name or URL of the currently analyzed page to the respective service — never your personal information.


5

Third-Party Services

RankSEO can send the page URL and/or content to services you opt into by entering an API key or endpoint. Each is governed by its own privacy policy. If you do not configure a service, no data is sent to it.

  • Google PageSpeed / Google APIs — Fetches Core Web Vitals and performance scores for a given URL. See Google Privacy Policy.
  • RDAP / WHOIS (rdap.org) — Retrieves publicly available domain registration information.
  • OpenAI — AI language model inference when you configure an OpenAI API key in settings.
  • Anthropic — AI language model inference when you configure an Anthropic API key in settings.
  • Google Gemini — AI language model inference when you configure a Gemini API key in settings.
  • Perplexity — AI-powered search and summarisation when you configure a Perplexity API key.
  • xAI — AI language model inference when you configure an xAI API key in settings.
  • OpenRouter — AI chat via OpenRouter (only when you configure and use AI Chat). See OpenRouter's Privacy Policy.
  • NVIDIA NIM — AI chat via NVIDIA NIM (only when you configure and use AI Chat). See NVIDIA's Privacy Policy.
  • Firecrawl — Web scraping and content extraction when you configure a Firecrawl API key.
  • Semrush Public API — Provides Domain Authority and backlink data. See Semrush Privacy Policy.
  • Ahrefs — Optional backlink and SEO metrics when you configure an Ahrefs API key.
  • SimilarWeb — Optional traffic and audience insights when you configure a SimilarWeb API key.
  • Keywords Everywhere API — Optional keyword volume data. Only called if you have configured an API key in settings.
  • WordPress via WP-X-MCP — Communicates with your own WordPress site when you configure your WP-X-MCP endpoint. Data goes only to the server you specify.

We do not control, operate, or take responsibility for the data practices of these third-party services. We encourage you to review their respective privacy policies.


6

AI API Keys & AI Chat

The AI Chat feature is optional. To use it, you provide an API key from either NVIDIA NIM or OpenRouter. Here is exactly how your API key is handled:

  • Your API key is stored only in Chrome's local extension storage on your device using the storage permission.
  • Your key is never transmitted to our servers, logged, or shared with any party other than the AI provider you selected.
  • When you send a message in AI Chat, the request is sent directly from your browser to NVIDIA NIM or OpenRouter — it does not pass through any RankSEO-controlled server.
  • The context sent to the AI model includes only the SEO data extracted from the current page (headings, meta tags, scores, etc.) and your chat message. It does not include cookies, passwords, or personal information.
  • You can delete your stored API key at any time by clearing it in the Settings tab of the Extension, or by uninstalling the Extension.

Important: When you use AI Chat, your messages and the page's SEO data are processed by the AI provider (NVIDIA or OpenRouter) according to their terms of service. Please review NVIDIA's Privacy Policy and OpenRouter's Privacy Policy before use.


7

Local Storage

RankSEO uses Chrome's chrome.storage.local API to save the following data on your device only:

  • Your selected theme preference (Light / Dark / Auto)
  • Your AI model configuration — selected provider, model name, temperature, max tokens, and API key
  • AI Chat conversation history within the current session

This data never leaves your device and is never synced to any cloud service or server operated by us. You can clear all stored data by uninstalling the Extension or clearing its storage via Chrome's extension settings.


8

No Tracking Policy

RankSEO contains zero tracking code. We do not use Google Analytics, Mixpanel, Segment, Sentry, or any other analytics or error-reporting service. We do not serve advertisements. We do not build user profiles. We do not monetize your usage data in any way.

This is a free, privacy-respecting developer tool. Our business model does not depend on your data.


9

Children's Privacy

RankSEO is intended for use by web developers, SEO professionals, marketers, and website owners. The Extension is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the Extension, please contact us and we will take appropriate steps.


10

Policy Changes

We may update this Privacy Policy from time to time as the Extension evolves. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify users via the Extension's settings panel or the Chrome Web Store listing.

Your continued use of the Extension after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.


11

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the Extension's data practices, please reach out:

General Email: hello@mubashirhassan.com
Company: Mubashir Hassan LLC

We aim to respond to all privacy-related inquiries within 5 business days.