Effective: 22 October 2026
1. Controller
VOXERN, obrt za usluge i trgovinu, vl. Robert Dusper, Drniška 15 A, 21220 Okrug Gornji, Croatia, OIB 44370289950 is the controller. Privacy requests: support@websitepagerankingchecker.com.
2. Data we process
- Account data: name, email, password hash, account preferences, subscription status and AI add-on entitlement.
- Billing data: billing details, base plan, optional add-on, invoices, payment status and Stripe identifiers. Ranking Checker does not receive your full card number when Stripe-hosted payment pages are used.
- Rank-tracking data: project names, domains, keywords, devices, locations, languages, reports and historical results.
- AI-visibility data: tracked prompts, brand or domain context, sampled model responses, observed mention and citation results, cited source URLs, model information and check timestamps.
- Technical data: IP address, device and browser details, timestamps, security and error logs, and session identifiers.
- Communications: support requests, complaints, withdrawal requests and related correspondence.
- Preference records: cookie-notice choices and the time they were stored.
3. Purposes and legal bases
- Creating accounts, delivering rank tracking and AI-visibility checks, billing and support: performance of a contract.
- Invoices, tax records and lawful authority requests: legal obligation.
- Security, fraud prevention, troubleshooting and service protection: legitimate interests.
- Optional website analytics: your consent. Advertising tracking is not used.
4. Recipients and processors
We disclose data only as needed to hosting, infrastructure, email, accounting and support providers; Stripe for payment processing; DataForSEO OÜ in Estonia for rank and keyword data; OpenAI for sampled model responses and web-search sources used by ChatGPT Visibility; professional advisers; and competent authorities where legally required.
DataForSEO receives only the domain, keyword, device, location, language and minimum technical parameters required for a query. OpenAI receives the tracked prompt, optional locale and technical settings needed to run the requested sampled check. Ranking Checker does not add the tracked brand or domain to a non-branded prompt, but a brand or domain typed by the user into the prompt is necessarily included. Neither provider receives account passwords or full card data from Ranking Checker. Stripe may also process information as an independent controller for fraud, regulatory and payment-network purposes.
Cloudflare Turnstile security checks
When Turnstile is enabled, the email sign-in, registration and password recovery request forms load Cloudflare Turnstile to help prevent automated abuse. Cloudflare processes technical browser and device information and the visitor IP address for this security check. Our server sends the challenge token to Cloudflare for verification; it does not send your password or the email form contents in that verification request. This integration is used for account security, not advertising or visit analytics. Password recovery links expire after 30 minutes and can only be used once.
Optional Google sign-in
If you choose Continue with Google, Google provides a verified account identifier, email address and display name so Ranking Checker can create or sign you into your account. We keep the Google account identifier to recognize returning users. We do not request access to your Gmail messages, contacts, Drive files or other Google content. Your Google password is never sent to Ranking Checker. Email and password sign-in remains available. Google also processes technical information needed to display and secure its sign-in service under its own privacy policy. Google Privacy Policy
Optional Google Analytics 4
With your consent, Google Analytics 4 measures visits to our public marketing pages so we can understand how the website is used. It is not loaded on account, login, registration or payment pages. Before consent, or after you reject optional analytics, no Google Analytics tag or measurement request is loaded by this integration. Google receives page-view and basic browser/device information after acceptance. Page URLs and referrers are sent without query strings or fragments. We do not send email addresses, account user IDs, saved project data or custom conversion events through this integration.
Google Analytics is used for website analytics, not advertising. Google signals and advertising personalization are disabled. Event-level data retention is set to 2 months. Analytics cookies and the locally stored consent choice last for up to 180 days. Google may process analytics data outside the EEA under the safeguards described below. You can withdraw consent using Cookie settings in the footer; this stops further analytics collection and removes analytics cookies from this website.
5. International transfers
Some provider subprocessors may handle data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the EU–US Data Privacy Framework, European Commission Standard Contractual Clauses or another valid safeguard.
6. Retention
Account and project data are kept while the account is active and afterwards only as long as reasonably needed for account closure, disputes, security and legal obligations. Billing and accounting records are retained for the period required by Croatian law. Written consumer complaints are retained for one year. Security logs, consent records and backups are deleted or overwritten according to operational and legal retention schedules. You may request the applicable period for a specific record.
7. Your rights
Subject to legal conditions, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time without affecting earlier lawful processing and object to direct marketing at any time.
Contact support@websitepagerankingchecker.com to exercise a right. You may complain to the Croatian Personal Data Protection Agency, Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, azop@azop.hr, azop.hr.
8. Security
We apply measures appropriate to risk, including encrypted transmission, password hashing, access controls, backups and security logging. No online service can guarantee absolute security.
9. Children
The service is not directed to children. Accounts may be created only by adults legally capable of entering a contract.
10. Changes
Material changes will be communicated through the service or by email where appropriate. The current version and effective date remain published on this page.