Privacy notice.
Information used by LimeSeek
LimeSeek stores account names, email addresses, password hashes, website domains, scan results, plan allowances and payment references. Session cookies keep you signed in and protect forms. Website pages are fetched to generate your requested audit; the report stores extracted metadata and findings, not a full copy of every fetched page.
Contact messages
When you contact us, we store your name, email address, subject and message for administrator review, follow-up and support. If you are signed in, we also link the message to your account. Messages are not published. Cloudflare Turnstile checks the contact form for automated abuse using browser and device signals; our server verifies its token before saving your message. We do not store the verification token with your message.
Custom-plan requests
If you request a custom plan, we store your name, email, optional company and website, requested coverage and message so our administrators can prepare and email a private offer. We retain the request and quote for follow-up and account support. Registration promo codes are encrypted and tied to the requested email address; they assign an offer to your account after redemption. Your request and price are not published in the public plan list.
Optional Google services
If Google login is enabled and you choose it, Google shares your account identifier, verified email and name so we can create or connect your LimeSeek account. Google login does not store your Google password or access tokens.
If you connect Google Search Console, we store encrypted access and refresh tokens, your selected property, and its search queries, page URLs, countries, devices, clicks, impressions and average positions. We use read-only access to import and display your website’s search performance. This data is not used for advertising or sold. Successful daily imports retain up to 180 days of performance history. Disconnecting from the website’s Search rankings page deletes its tokens and imported history; you can also remove LimeSeek access in your Google account permissions. Ranking snapshots already saved in completed scan reports remain part of those reports. Existing backups may retain records until their normal rotation. Archiving a website stops imports and preserves existing history.
If optional Google Analytics is enabled, public pages ask for consent before loading it. Analytics helps measure public page visits; account, administration and scan-report pages are excluded. Query strings and account identifiers are not sent. Your choice is saved in this browser for up to 180 days. Use Analytics preferences in the footer to change it; declining disables further measurement and removes LimeSeek’s Google Analytics cookies where accessible.
Payments
Stripe hosts checkout and the billing portal. Card details are handled by Stripe and are not stored in LimeSeek. We retain payment identifiers and entitlement records to provide the purchased service.
Access and retention
Your workspace and reports are private to your account and authorized administrators. Scan and purchase history is retained for account support and service operation. Archiving a website preserves its reports. Contact the website operator to request help with your account or data.
Third parties
A scan sends requests to the domain you add. Email delivery uses the operator’s configured mail provider. This application does not include advertising trackers.
Homepage performance testing
When homepage performance testing is enabled, LimeSeek sends the public homepage URL to Google PageSpeed Insights. Google loads the page and its resources to run mobile and desktop Lighthouse lab tests. We store a compact summary of scores, loading metrics and improvement suggestions with your private scan report. Account credentials and the integration API key are not included in the report.
SEO insights and external data
We retain compact headings, link anchors, structured-data observations and content fingerprints from checked public pages to build private analysis. Optional Google indexing checks send sampled page URLs and the selected property through your read-only Search Console connection. CrUX receives public page URLs to retrieve aggregated real-user performance; additional PageSpeed tests send sampled URLs for browser measurements.
If the administrator configures DataForSEO and you opt in for your website, research requests send the website and competitor domains, selected keywords, location, language and device. Provider estimates and ranking observations are stored in your private workspace. CSV imports retain your supplied data, source and observation date without contacting a provider. These additional non-technical snapshots and imports are retained for up to 180 days. Previously saved insight snapshots can remain after Search Console is disconnected; disconnect stops further authorized inspections/imports. Technical scan evidence remains part of scan history.