Privacy Policy

How SerpDelta collects, uses, and protects your data.

Last updated: April 2026

SerpDelta (“we,” “us”) is operated by Ben Peetermans. We are the data controller for the personal data processed through serpdelta.com.

What We Collect

DataSourcePurpose
Email address, name, profile photoGoogle OAuth sign-inAccount identity
Google Search Console metricsGSC API (read-only)Core product functionality
Billing informationStripe (we never see your card number)Payment processing
IP address, user agentYour browserSecurity and abuse prevention

We do not use advertising cookies, tracking pixels, or third-party analytics that profile you. Our analytics tool (itbroke.dev) is first-party and cookieless — it counts page views without identifying individuals.

Processing activityLegal basis
Account creation and authenticationContract: necessary to provide the service
Displaying your Search Console dataContract: the core service you signed up for
Sending email alerts and digestsConsent: you can disable these in Settings
Payment processing via StripeContract: necessary to fulfill your subscription
IP/user-agent loggingLegitimate interest: security and abuse prevention
Cookieless page analyticsLegitimate interest: understanding aggregate usage patterns

How We Use Your Data

  • Display your Search Console metrics in a readable format
  • Calculate changes and trends over time
  • Send alerts about significant ranking changes (if you enable them)
  • Process payments for Pro subscriptions

We do not sell, rent, or share your data with advertisers or data brokers.

Data Storage and Retention

  • Your data is stored on servers in the United States (hosted by Cloudways/DigitalOcean)
  • Google OAuth tokens are encrypted at rest
  • Search Console data is retained based on your plan: 90 days (Free) or 180 days (Pro)
  • Account data is retained for as long as your account is active
  • When you delete your account, all data is permanently removed within 30 days

Third-Party Services

ServiceWhat it doesTheir privacy policy
Google OAuthAuthenticates your identityGoogle Privacy Policy
Google Search Console APIProvides your ranking data (read-only access)Google API Terms
StripeProcesses payments for Pro subscriptionsStripe Privacy Policy
ResendSends transactional emails (alerts, digests)Resend Privacy Policy

No other third parties receive your data.

Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure (“right to be forgotten”): Request deletion of your data. You can delete your account yourself in Settings → Account → Delete account, or email us
  • Data portability: Request your data in a machine-readable format (CSV export is available for Pro users)
  • Restriction: Request that we limit how we process your data
  • Objection: Object to processing based on legitimate interest
  • Withdraw consent: For email notifications, toggle them off in Settings at any time

We will respond to any rights request within 30 days.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority (supervisory authority).

Account Deletion

You can delete your account at any time from Settings → Account → Delete account. This permanently removes:

  • Your account and login credentials
  • All stored Google OAuth tokens
  • All Search Console data and ranking history
  • Any active subscriptions (cancelled immediately)

Deletion is irreversible and completes within 30 days.

Children’s Privacy

SerpDelta is not intended for use by anyone under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the email address associated with your account.

Contact

For privacy questions or to exercise your rights:

Email: privacy@serpdelta.com