Legal

Privacy Policy

Last updated: 30 October 2026

This policy explains what personal data danishishfaq.online collects, why, and what you can do about it. The website and its SEO audit tool are run by Mohammad Danish Ishfaq, a sole proprietor based in Pakistan ("we", "us"). Questions or requests: support@danishishfaq.online.

1. What we collect

  • Contact form and emails: your name, email address, message, and anything else you choose to send us.
  • Audit tool: the website addresses you audit, a one-way hashed version of your IP address, and a random cookie ID. We use these to apply the free limit and prevent abuse. If you click "Copy share link", the report is saved so the link works.
  • Paid plans: your email address, plan, subscription status, renewal dates, audit usage, and your access key (stored only in hashed form on our server and in your browser's local storage so you stay signed in).
  • Blog comments: the name, email address and comment you submit.
  • Analytics: pages visited, device and browser type, approximate location, how you arrived, and how you interact with pages (see section 4).
  • Server logs: our hosting provider records standard technical data such as IP address, browser and time of request, for security and troubleshooting.

We do not receive or store your card or bank details. Payments are handled entirely by our payment partner (see section 3).

2. Why we use it

  • to run the audit tool, apply plan limits and send you your access key;
  • to reply to messages and provide support;
  • to manage subscriptions, billing questions and refunds;
  • to understand how the website is used and improve it;
  • to keep the website secure and prevent spam and misuse;
  • to meet legal and tax obligations.

Where the law (for example the GDPR) asks for a legal basis: we rely on performing our contract with you (plans, support), our legitimate interests (security, abuse prevention, improving the site) and, where required, your consent (analytics).

3. Who we share it with

We don't sell your personal data. We share it only with service providers that help us run the website:

  • Paddle.com or Lemon Squeezy: our reseller and Merchant of Record. They process checkout, payments, tax and invoices under their own privacy policy, and share with us your email, plan and subscription status.
  • Hostinger: website hosting and email.
  • Google: Google Analytics, and the PageSpeed Insights API, which receives the website address being audited.
  • Microsoft Clarity: anonymous usage insights, heatmaps and session recordings.

We may also disclose data if required by law or to protect our rights and users.

4. Cookies and analytics

  • Google Analytics 4 uses cookies to measure visits and events, such as starting an audit.
  • Microsoft Clarity records clicks, scrolling and mouse movement to show how pages are used. Clarity masks sensitive input by default.
  • Audit tool cookie "av2d": a random ID used only to apply the free limit. It lasts up to 400 days.
  • Local storage keeps your access key and small preferences in your own browser.

You can block or delete cookies in your browser settings, or use Google's opt-out add-on for Analytics. The audit tool may count your free audit by IP address if cookies are blocked.

5. How long we keep it

  • Saved audit reports: deleted after 180 days.
  • Audit usage records and hashed IPs: kept only as long as needed for limits and abuse prevention.
  • Messages and support emails: up to 3 years, unless you ask us to delete them earlier.
  • Subscription records: while you're a customer and as long as tax and accounting rules require afterwards.
  • Analytics data: according to Google Analytics and Microsoft Clarity retention settings.

6. Your rights

You can ask to access, correct, delete or receive a copy of your personal data, or object to how we use it. Email support@danishishfaq.online and we will reply within 30 days. If you live in the EU, EEA or UK, you can also complain to your local data protection authority.

7. International transfers and security

We are based in Pakistan, and our providers may process data in other countries, including the EU and the United States. We use reputable providers, HTTPS across the whole site, and limit who can access data. No method of transfer or storage is 100% secure, but we take reasonable steps to protect your information.

8. Children

The website is meant for businesses and adults. We don't knowingly collect data from children under 16.

9. Changes

We may update this policy. The date at the top shows the latest version. Important changes affecting customers will be emailed to them.

See also our Terms and Conditions and Refund Policy.