Privacy policy

Who is responsible

The data controller for the processing described here is:

Name

Anton Sychev

Tax ID (NIF)

ESX3282323Q

Address

Calle Gomis 27, 08023 Barcelona, Spain

Email

[email protected]

The app runs on your Mac

Spider SEO is a native application. Crawls, extracted data, screenshots, audit results and exports are written to a database and to folders inside your own user account. Nothing you crawl is uploaded to us.

The app has no account, no sign-in, no analytics or telemetry SDK, no advertising identifier and no cross-app tracking. It does not collect data from you in the sense of the App Store privacy labels: everything it produces stays on your Mac.

When you crawl a site, your Mac sends ordinary HTTP requests to that site, with the user agent you chose. The site's owner sees those requests in their logs, as with any crawler.

Google services you connect yourself

The Search Console and Analytics tabs use Google sign-in with read-only scopes (webmasters.readonly and analytics.readonly). The access and refresh tokens are stored in your macOS Keychain, and every request goes from your Mac straight to Google. We never receive your tokens, your search data or your site's analytics.

Spider SEO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That data is used only to show it to you next to your crawl; it is not shared, sold, used for advertising or used to train AI models.

You can disconnect at any time with Disconnect in the Integrations window, which deletes the tokens from the Keychain, or revoke access from your Google Account at myaccount.google.com/permissions.

PageSpeed Insights tests send the URL you test, and the API key if you set one, to Google. The Rich Results and Schema.org buttons open the URL in your browser on Google's and schema.org's own sites. Those services apply their own privacy policies.

Purchases

Pro is sold through the Mac App Store using Apple in-app purchase. Apple processes the payment as an independent controller under its own privacy policy; we receive no name, address, card number or Apple ID. The app reads the signed App Store transaction on your Mac to unlock what you bought.

Bug reports

Only reports you choose to send. When you submit the report a bug form on this site, one JSON document is posted to spider-seo.app/api/bugs and stored in our database. It contains the type and text you wrote, any stack trace you pasted, your browser language, time zone, user agent and the page address, and a random per-install identifier. A report sent from inside the app, if a version offers it, carries the app version and channel, the macOS version, CPU architecture, free RAM and disk, the current screen and, for a crash, the stack and recent log lines — and the app asks you before each one.

Your email address is only included if you type it into the optional field, and only so that we can answer you: when we reply, for example to tell you the problem is fixed, the email and our message are kept with the report. We do not store your IP address, your name, your Apple ID or a hardware serial number.

The random identifier exists so that a crash that retries on every launch is stored once instead of twenty times, and so that a flood of reports from one machine can be rate limited. It is not linked to anything else about you.

Launch waitlist

Until Spider SEO is on the Mac App Store, the site offers a waitlist. If you join it, we store the email address you type, the language of the page, which form you used, the date, and the version of the consent text you agreed to. Nothing else: no name, no IP address.

We use that address for one thing: a single email telling you the app is available. It is not added to a newsletter, shared or used for advertising. The address is deleted once the launch email has been sent, and in any case 12 months after you joined.

You can withdraw at any time, before or after the email, by writing to the address below; we delete the entry and confirm it.

The website

spider-seo.app is a static site served by Cloudflare Pages. Cloudflare processes request data such as IP addresses to deliver the site and protect it from abuse.

With your consent, and only after you click Accept in the cookie banner, the site loads Google Analytics 4 to measure visits. Advertising features and Google Signals are off and GA4 does not store IP addresses. Reject, or withdraw later from Cookie settings in the footer, and no analytics request is made.

Who else handles the data, and where

Cloudflare, Inc. hosts the site, the bug-report database and the waitlist as our processor. Cloudflare operates globally, so data may be processed outside the European Economic Area; such transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses in Cloudflare's data processing addendum.

Our emails — the notice we receive when a bug report or a waitlist sign-up arrives (which includes the address you gave) and our replies to bug reports — are sent through our email provider, which processes them as our processor under a data processing agreement.

Google Ireland Limited provides Google Analytics as our processor, with transfers to Google LLC in the United States covered by the same framework.

We do not sell or share personal data with advertisers or data brokers, and nothing is used for profiling or automated decisions.

Security and children

Reports travel over HTTPS, the database is only readable with an administrator token, and Google tokens on your Mac are kept in the Keychain.

Spider SEO is a professional tool and is not directed at children under 16. We do not knowingly collect their data; if you believe a child's report reached us, write to us and we will remove it.

Changes

When this policy changes we update the date at the top of this page. A material change is also announced in the app or on this site before it takes effect.

Purposes and legal bases

Your rights

You can ask for access to the data we hold about you, its rectification or erasure, the restriction of its processing, a portable copy, or object to processing based on legitimate interest. Where we rely on consent you can withdraw it at any time without affecting what happened before. Write to [email protected]; we answer within one month.

Because we do not know who you are, the fastest route for a bug report is to include its per-install identifier: on this site it is the value of spider.installId in your browser's localStorage. We delete every row stored under it and confirm back.

If you think we have not handled your data properly you can complain to a data protection authority — in Spain the Agencia Española de Protección de Datos, aepd.es — or to the authority of the EU country where you live.