Last updated October 28, 2026
Privacy policy
This explains what RareMatter collects, why, who helps us process it, and what you can ask us to do with it. We do not sell personal data and we do not run advertising or third-party analytics trackers on this site.
What we collect
- Account details: your email address and, if you give it, your name.
- Websites and scan results: the URLs you add, the public pages we crawl, and the findings, scores and history we produce.
- Connected data: if you connect Google Search Console, Google Analytics or Bing Webmaster Tools, the access tokens and the reports we fetch with them.
- Billing records: your plan, payment dates, amounts and the Paddle (or, for older payments, Stripe or PayPal) reference. Card details stay with the payment provider.
- Messages: what you send through the contact form or the help box, and our replies.
- Technical logs: IP address, browser, pages requested and errors, kept to secure the service and fix problems.
- Free tools: the URL you enter is used to run the check; we keep it only as long as needed to show the result and prevent abuse.
Why we use it
To run your account and the features you use, sign you in, take payments and keep billing records, answer your messages, send the emails you ask for (sign-in links, weekly reports, alerts), keep the service secure and prevent abuse, and meet legal obligations. We use your data because it is necessary to provide the service you signed up for, because of legal requirements, or for our legitimate interest in keeping RareMatter secure and working.
Who processes it for us
- Paddle (merchant of record): payments, tax and invoicing. Stripe and PayPal hold records of earlier payments.
- Resend: delivering our emails.
- Cloudflare: network security and delivery of the site.
- Our server host: storing the application and database.
- Google and Microsoft Bing: only when you connect those accounts.
- AI model providers: the parts of your audit and connected data needed to answer, when you use the AI analyst.
Google user data
When you connect a Google account, RareMatter asks for read-only access to Google Search Console (webmasters.readonly), plus your email address to identify the connection. If Google Analytics is offered and you choose to add it, we also ask for read-only Analytics access (analytics.readonly). We use this data only to show you your own clicks, queries, positions and, with Analytics, sessions and conversions, to rank what to fix on your sites, to measure whether fixes worked, and, when you ask the AI analyst a question, to answer it from your own data. We never change anything in your Google accounts.
- RareMatter's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not sell Google user data, use it for advertising, or use it to train or improve AI models, ours or anyone else's. The AI model provider receives only the parts needed to answer your question, under terms that do not allow it to train on that data.
- Google data is shared with no one else except where the law requires it. People at RareMatter do not read it unless you ask us to for support, or it is needed for security or by law.
- Access tokens are stored encrypted. Disconnecting Google in Integrations deletes the tokens and the cached reports straight away; you can also remove RareMatter at myaccount.google.com/permissions. Deleting your account deletes all Google data we hold.
Cookies and storage
We use a session cookie to keep you signed in and a security cookie that protects forms. A few view settings are saved in your browser. We use no advertising or analytics cookies, so there is nothing to opt out of. When you arrive from an ad or another website, we note the campaign tags or referring site in your existing session, to count which campaigns bring sign-ups; this sets no extra cookie and is never shared with ad networks.
How long we keep it
Account data, websites and scan history are kept while your account is open. Billing records are kept as long as tax and accounting law requires. Support messages are kept for up to two years. Server logs are kept for a short period and then deleted. Backups roll over within 14 days. When you ask us to delete your account, we delete or anonymise your data except what we must keep by law.
Your choices and rights
You can see and change most of your data in the dashboard and disconnect Google or Bing at any time from Integrations. You can ask us for a copy of your data, to correct it, or to delete your account by emailing [email protected] from the address on the account. Depending on where you live you may have further rights, including the right to complain to your data protection authority.
Security
Access to customer data is limited to what is needed to run and support the service. Sign-in links are single-use and expire after 15 minutes, two-factor authentication is available, and payment details never touch our servers.
Children
RareMatter is a tool for businesses and site owners and is not meant for children.
Changes
If we change how we handle personal data in a way that matters, we will update the date below and tell signed-in customers before it takes effect.
Contact
Privacy questions or requests: [email protected] or the contact form.
Also see the terms of service, refund policy, or contact us.