Privacy policy
Draft. This text is a starting point and is not legal advice. Have it reviewed before launch.
This policy tells you what data this website and the Vantage SEO plugin collect, where the data goes, and what you can do about it.
Who we are
This website and Vantage SEO Pro are operated by [Legal entity name], [Postal address]. In this policy, "we" and "us" mean that operator.
For privacy questions, write to [Contact email].
We are the controller for the data that this website and our license and payment systems collect. We are not the controller for the data on your own Instatic site. You control that data.
Summary
- This website sets no cookies. It runs no analytics, no ads and no tracking pixels.
- Our web server keeps standard logs for security and operations.
- The free plugin sends nothing to us.
- Vantage SEO Pro sends a small license check to our license server. The check does not contain your page content.
- Other plugin features talk to Google, IndexNow or an AI provider only when you turn them on. Your data then goes directly from your server to that service. It does not go through us.
What this website collects
Server logs
This website is static HTML. We host it on our own server[, with hosting provider — name before launch]. When your browser requests a page, the web server can record:
- your IP address
- your browser's user agent
- the date and time of the request
- the URL you requested
We use these logs to keep the site secure, to find errors and to stop abuse. We do not use them to build profiles, and we do not sell them. We keep them for [Server log retention period], then we delete them.
Explainer video
The homepage video loads from nottod.com. We run that host too. When the video loads, your browser sends a request to nottod.com. That server can log the same data as above, for the same purposes and the same period.
Browser storage
This website sets no cookies. It stores two small values in your browser's localStorage: your light or dark theme choice, and your answer to the cookie notice. These values stay in your browser. The site never sends them to our server. The cookie policy gives the details.
Fonts
We serve all fonts from our own server. Your browser does not contact Google Fonts or any other font service.
No forms and no accounts
This website has no contact form, no newsletter form and no user accounts. We collect no data that you type into this site.
GitHub
Links to the source code go to github.com/Mariomarquezt/vantage-seo. When you follow a link, you leave this site. GitHub's own privacy policy then applies. If you open an issue or a pull request on GitHub, GitHub stores it, and it is public.
What the plugin sends, and to whom
The plugin runs on your own Instatic install. We cannot see your site, your content or your settings. The plugin sends data out only in the cases below. For the full technical list, read Privacy and data in the docs.
| Feature | Edition | When it runs | Where the data goes | What it sends |
|---|---|---|---|---|
| License check | Pro | When you activate or deactivate a key, and about once a day after that | Our license server | See License check below |
| IndexNow | Free and Pro | Only when you turn it on; after you publish | IndexNow (api.indexnow.org), which shares the URLs with participating search engines | Your site's host name, your IndexNow key, the key file URL and the URLs of changed pages |
| Google Search Console | Pro | Only when you add your own Google credentials | Google (oauth2.googleapis.com, searchconsole.googleapis.com) | Your OAuth client ID, client secret and refresh token, your Search Console property, and data queries. It can also submit your sitemap URL. |
| AI assistant | Pro | Only when you add your own API key and ask for a suggestion | The provider you choose: Anthropic, OpenAI or OpenRouter | Your API key, the site name, the page title, the current field value, the language and an excerpt of the page text (up to 4,000 characters) |
For IndexNow, Google and the AI providers, you are the one who sends the data, under your own account with that service. That service's own terms and privacy policy apply. We do not receive a copy.
License check
Vantage SEO Pro contacts our license server [License server domain — set before launch]. The server runs on Cloudflare Workers.
- Activation sends the product name, your license key, a random install ID and your site URL.
- Daily check sends the product name, your license key, the install ID, a one-time number and a timestamp. It does not send your site URL again.
- Deactivation sends the product name, your license key and the install ID.
The license check sends no page content, no visitor data and no settings. Our license server stores the license key, its status, seat count and expiry date, and for each activation: the install ID, a shared secret, the site URL, and the activation and deactivation times. Like any web service, Cloudflare can process the IP address of your server when the request arrives.
Data the plugin keeps on your server
Some plugin features store data in your own Instatic install. We never receive this data.
- Page-view and 404 counts (free, off by default). When you turn this on, a small script on your published pages sends the page path, the referring site (other sites only), a screen-size group and a site ID to your own server. It sends no query strings and sets no cookies. It does nothing when the visitor's browser sends Do Not Track or Global Privacy Control. The plugin keeps only counts per page path and per day, and deletes them after 30 days.
- MCP audit log (Pro). Every agent tool call is logged on your server with the tool name, the token label, a short digest of the arguments and the result status.
If you run a site with the plugin, you are responsible for telling your own visitors about any data you collect.
Payments
Checkout for Vantage SEO Pro is not live yet. This section describes how payments will work when it goes live.
Stripe will process all payments. You give your card details to Stripe, not to us. Stripe's own privacy policy applies to that data.
From Stripe, we receive your name, your email address, your billing country, the Stripe customer, subscription and payment IDs, and the details of the license you bought. We never receive your full card number.
Our license server links your license key to the Stripe IDs. It uses them to issue the key, to renew it, and to end it when a subscription ends or a payment is refunded or charged back.
Legal bases
Where data protection law such as the GDPR applies, we use these legal bases:
| Processing | Legal basis |
|---|---|
| Server logs for this website and the video host | Our legitimate interest in keeping the site secure and working |
| Theme and cookie-notice choices in your browser | Strictly necessary to give you the service you asked for. No consent is needed. The data stays on your device. |
| License activation and checks | Performance of our contract with you |
| Payment and billing data | Performance of our contract with you, and our legal obligations (for example, tax records) |
| Replies to your emails | Our legitimate interest in answering you, or steps you ask for before a contract |
Who else receives data
We do not sell personal data. We share it only with the service providers that we need to run the service:
- [Hosting provider — name before launch], which hosts this website and
nottod.com - Cloudflare, which runs our license server
- Stripe, which will process payments
We can also disclose data when the law requires it.
Some of these providers process data outside your country, for example in the United States. [Transfer safeguards — confirm before launch]
How long we keep data
| Data | Retention |
|---|---|
Server logs (this site and nottod.com) | [Server log retention period] |
| License and activation records | [License record retention period] |
| Payment and billing records | [Billing record retention period — check tax law] |
| Support emails | [Support email retention period] |
| Theme and cookie-notice choices | In your browser until you clear them. We never hold a copy. |
Your rights
Depending on where you live, you can have the right to:
- Access the personal data we hold about you
- Correct data that is wrong
- Delete your data
- Restrict how we use your data
- Object to processing that we base on legitimate interest
- Get a copy of your data in a portable format
- Complain to a data protection supervisory authority, for example the one in the country where you live or work
To use a right, email [Contact email]. We can ask you to prove who you are. We will answer within [Response period, e.g. one month].
If you delete your license record, your Pro features stop working, because we can no longer check the key. We must keep some billing records for tax reasons, even when you ask us to delete them.
Children
This website and Vantage SEO are for people who build and run websites. They are not for children. We do not knowingly collect data from anyone under [Minimum age, e.g. 16]. If you think a child sent us data, email us and we will delete it.
Changes to this policy
We can change this policy when our service or the law changes. We will put the new date at the top of this page. If a change is important, we will show a notice on this site[ and email Pro customers].
Contact
[Legal entity name]
[Postal address]
[Contact email]
See also: Cookie policy, Terms, Disclaimer.