Skip to content
TheUrlInsights
Legal

Privacy Policy

Effective date: Last updated:

TheUrlInsights provides a Chrome extension and related website services for checking links, reviewing redirects, auditing on-page SEO, and scanning websites.

This Privacy Policy explains what information we collect, how we use and share it, how long we retain it, and the choices available to you when you use TheUrlInsights.

On this page

1. Contact Details

Privacy and data requests
privacy@theurlinsights.com
General enquiries
info@theurlinsights.com

2. Information We Handle

The information we handle depends on the features you use and whether you sign in, submit feedback, enable usage analytics, or purchase a paid plan.

2.1 Account information

When you sign in using Google, we receive and store the information needed to create and maintain your account. This includes your Google account identifier, email address, name, and profile picture.

We use this information to authenticate you, maintain your account, associate your plan with your account, and provide account-related support.

2.2 Optional profile information

You may be asked to personalize your experience by providing information about your role, how you heard about TheUrlInsights, what you want to use it for, and the type of work you usually do.

You can skip this step. If you skip it, your answers are not saved.

2.3 Usage analytics

The extension includes a setting called Share usage analytics. This setting is enabled by default. You can turn it off from the Settings account menu.

When analytics is enabled, the extension records feature-use events to help us understand product usage and improve the Service. Events may include:

  • The feature or section used, such as the Links tab, SEO tab, or Settings
  • Actions, such as starting a scan or exporting a report
  • Counts and results, such as how many links were checked or how many issues were found
  • Selected options, such as an export format
  • Extension version and browser name and major version
  • A random installation identifier, session identifier, account identifier, and event timestamp

Analytics events do not include the page addresses or hostnames being checked, search text, page contents, or text you type into the product.

Analytics events are sent to Supabase in batches while you are signed in. They are associated with your account and installation identifiers.

You can disable analytics at any time by turning off Share usage analytics. When you do, pending analytics events are discarded and new events are not collected for transmission through this feature.

Analytics records are retained for up to 13 months and are deleted with the account, subject to technical limitations and legal retention requirements.

2.4 Ratings and support requests

If you rate the extension, we receive your rating, account identifier, extension version, and relevant timestamps.

If you submit a message through Contact support, we receive the information you submit, which may include:

  • Your account identifier and email address
  • The support topic and your message
  • Extension version and browser user-agent information
  • The time of submission
  • Your rating, if one is associated with the request
  • The current page address, but only if you leave Include this page’s address selected

The support form may have Include this page’s address selected by default. You can untick it before sending your message if you do not want to include the address.

Please do not include passwords, full payment-card details, or other sensitive information in support messages.

2.5 Plan and purchase information

The Service may offer free and paid plans. Paid purchases are processed through Lemon Squeezy, which acts as the merchant of record for purchases made through its checkout.

We maintain information needed to associate your account with the relevant plan, including your account identifier, plan type, trial end date where applicable, and plan-record timestamps.

Lemon Squeezy handles checkout and transaction processing under its own terms and privacy policy. We do not intend to receive or store your full payment-card number through TheUrlInsights.

2.6 Information stored in your browser

The extension stores settings and certain information in Chrome extension storage on your device. Depending on your use of the Service, this may include:

  • Link-type settings and table-column preferences
  • Blocked URLs, domains, and URL patterns
  • Link-checking preferences, including speed, user agent, timeout, retries, and cache settings
  • SEO preferences, including bot settings, AI policy settings, length limits, and highlight colours
  • Your analytics preference and pending analytics events
  • Your most recent rating
  • A random installation identifier and your sign-in session
  • The last five Full Site Scan histories, including scan settings, counts, and broken, warning, and redirected links, with up to 2,000 recorded links per history and up to 10 found-on pages per link

You can delete a Full Site Scan history from the extension’s History view.

Link results are held in memory for up to 60 minutes, or for the period you configure in Settings. They are not written to disk. The toolbar’s per-tab state is stored in session storage and is cleared when Chrome closes.

Pending analytics events are stored locally for up to seven days and are discarded sooner when analytics is turned off.

Uninstalling the extension removes its locally stored extension data from the browser. It does not automatically delete information already sent to our services or information held by third-party providers.

3. How Link Checks and Site Scans Work

Link checks and SEO checks are initiated from your browser. Requests are made from your device directly to the websites and resources being checked; TheUrlInsights does not route those checking requests through a TheUrlInsights server.

Depending on the checks you run, the extension may request links found on the page, the site’s robots.txt, sitemaps, canonical and hreflang targets, social images, favicons, and other resources required for the selected checks.

The extension reads page information locally to identify links, anchors, metadata, robots directives, and related findings.

For HTML pages, the extension may read up to 1 MB of HTML to look for soft-404 text, anchors, canonical information, and robots tags. During a Full Site Scan, it may read up to 2 MB of HTML per page to discover links. The HTML is used in the browser for the scan and then discarded; only the findings and link information needed for results are retained.

Full Site Scan reports, including PDF reports, are generated in your browser. The report is not uploaded to TheUrlInsights as part of report generation. Generating a PDF may cause the browser to fetch the scanned site’s own social image for inclusion in the report.

The extension’s checking requests do not send your browser’s cookies. As a result, resources that require a logged-in session may be reported as Auth Required or may not be fully accessible to the checker.

Requests to checked websites originate from your device and IP address. Those websites may receive ordinary connection information as part of the request. Their handling of that information is governed by their own policies.

4. Information Sent to Supabase

TheUrlInsights uses Supabase for account and database services. Depending on your actions, the following information may be sent to Supabase:

  • Account records: Google account identifier, email, name, and profile picture.
  • Ratings: Account identifier, rating from 1 to 5, extension version, and creation and update timestamps.
  • Plan records: Account identifier, plan type, trial end date where applicable, and record timestamps.
  • Full Site Scan usage: Account identifier, scan start time, and page limit. These records are used to count scans against plan limits and do not include details about the site scanned. Older usage records are deleted according to the product’s retention process.
  • Analytics events: Account and installation identifiers, session identifier, event name, product location where the event occurred, event counts or choices, extension version, browser name and major version, and event time.
  • Optional profile answers: Role, referral source where provided, intended use, work type, and record timestamps.
  • Support requests: Account identifier, email, topic, message, optional page address, associated rating if any, extension version, browser user-agent information, and submission time.

Database access controls are used to restrict access to account-specific records. No security measure can guarantee complete protection in every circumstance.

5. How We Use Information

We use information to:

  • Authenticate users and maintain accounts
  • Provide the extension’s features and determine plan access
  • Apply plan limits and track Full Site Scan usage
  • Respond to support requests and product feedback
  • Understand product usage when analytics is enabled
  • Maintain, secure, troubleshoot, and improve the Service
  • Associate purchases with accounts and manage paid access
  • Prevent misuse and comply with legal obligations

We do not sell personal information. We do not use extension analytics to build advertising profiles or sell browsing histories.

6. How We Share Information

We share information only as needed to provide, support, secure, or improve the Service, process transactions, or meet legal obligations.

6.1 Service providers

Our documented service providers and integrations include:

  • Google: Google sign-in and Google Fonts, including the Inter font used in parts of the extension.
  • Supabase: Account authentication and database services for account records, plans, analytics events, ratings, support requests, and optional profile answers.
  • Lemon Squeezy: Checkout, payment processing, transaction handling, refunds, and subscription-related services.
  • Website hosting and infrastructure providers: Delivery and operation of the website and related services, as applicable.

These providers may process information under their own terms and privacy policies and under any applicable service arrangements.

We may disclose information if required by law or legal process, or where reasonably necessary to investigate fraud or abuse, protect the Service or its users, enforce our terms, or protect rights and safety.

If TheUrlInsights is involved in a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

We do not sell personal information to data brokers or share extension analytics with advertising networks for targeted advertising.

We handle personal information in accordance with applicable law, including Indian data-protection requirements where they apply.

Depending on the processing and applicable legal requirements, we may process information to provide the Service you request, meet legal obligations, protect the Service, pursue legitimate operational interests, or on the basis of consent where consent is required.

Where consent is the applicable basis, you may withdraw it through the available product controls or by contacting us. Withdrawal does not affect processing already carried out lawfully before withdrawal.

8. Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

  • Account information: While your account is active and for a reasonable period afterward where needed for security, legal compliance, disputes, or legitimate business records.
  • Analytics: Up to 13 months, with deletion on account deletion subject to technical limitations and legal requirements.
  • Full Site Scan usage records: Used for monthly plan-limit calculations; older records are deleted according to the product’s retention process.
  • Support requests and ratings: As needed to respond, maintain service records, improve the product, handle disputes, and meet legal obligations.
  • Plan and purchase records: As needed to manage entitlements, reconcile purchases, and meet applicable legal or financial recordkeeping requirements.
  • Local scan history and settings: Until you delete them, clear the relevant browser data, or uninstall the extension.
  • Pending analytics events: Up to seven days, or until analytics is turned off.

Actual retention may depend on technical backups, service-provider systems, legal obligations, and the status of a request.

9. Your Choices and Privacy Rights

Subject to applicable law, you may be able to request access to, correction of, or deletion of personal information, withdraw consent where processing relies on consent, or raise a complaint about our handling of information.

You can also:

  • Turn off Share usage analytics in Settings.
  • Delete Full Site Scan histories from the extension’s History view.
  • Untick Include this page’s address before sending a support request.
  • Sign out through the account menu.
  • Uninstall the extension to remove locally stored extension data.
  • Contact us to request deletion of your account or ask about information held in our services.

To make a privacy request, email privacy@theurlinsights.com. We may need to verify your identity before responding. Some information may need to be retained where required by law or where a lawful exception applies.

Signing out ends the session in that browser; it does not necessarily sign you out in other browsers. Uninstalling the extension does not delete information already held by our services or by third-party providers.

10. International Processing

Our service providers may process information in countries outside India or your country of residence. Where applicable law requires safeguards or other measures for international transfers, we will take the steps required by that law.

11. Security

We use reasonable technical and organizational measures designed to protect information from unauthorized access, loss, misuse, or alteration. These include access restrictions and the security controls offered by our service providers.

No system can be guaranteed to be completely secure. You are responsible for protecting access to your Google account and your device.

12. Children’s Privacy

The Service is not intended for children who are not legally permitted to use it. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us unlawfully, contact privacy@theurlinsights.com.

13. Third-Party Websites and Services

The Service may link to or rely on third-party websites and services, including Google, the Chrome Web Store, Lemon Squeezy, and websites you choose to scan. Their own terms and privacy policies govern their handling of information.

We do not control third-party websites or their independent privacy practices.

14. Changes to This Policy

We may update this Privacy Policy when our product, providers, data practices, or legal obligations change. We will update the “Last updated” date when changes are made and provide additional notice where required by law.

15. Contact and Privacy Requests

For questions, privacy requests, or complaints about how we handle personal information, contact: