Privacy Policy
Effective: 2026-08-06 · Version: 1.0
This policy explains how the operator of ClearSiteScore processes personal data under the EU General Data Protection Regulation (GDPR) and Hungarian data protection law.
1. Data controller
The controller is the operator of the service:
- Company: G-UNIT MEDIA Kft.
- Registered seat: 1047 Budapest, Váci út 71., Magyarország
- Company registration number: 01-09-869146
- VAT number: 13708935-2-41
- E-mail: hello@clearsitescore.com
- Phone: +36 70 314 8136
- Website: https://www.clearsitescore.com
We are not required to appoint a data protection officer; privacy requests are handled at the e-mail address above.
2. Who this applies to
The service is offered to business (B2B) users only. Personal data is processed in the context of business contact details (e.g. work e-mail, name) and technical logs. We do not knowingly collect data from anyone under 16.
3. What we process, why, and on what legal basis
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account data: e-mail, display name, language | Account creation, sign-in, providing the service | Performance of a contract (Art. 6(1)(b)) | 30 days after account deletion |
| Scanned URLs, domains, audit results, findings, AI action plan | Running the requested scan, reports and score history | Performance of a contract (Art. 6(1)(b)) | For the life of the account, then 30 days |
| E-mail address entered for a free scan (lead) | Sending the scan result, contacting you | Contract/request (Art. 6(1)(b)); consent for marketing (Art. 6(1)(a)) | 24 months or until you unsubscribe |
| Payment data: amount, currency, plan, Stripe identifiers, billing details | Processing payment, invoicing, accounting | Contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) | Accounting records: 8 years |
| Affiliate partner data: name, e-mail, payout details, commission records | Operating the partner programme, paying commission | Contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) | 8 years after the partnership ends (records) |
| Technical data: IP address, browser data, error logs, daily limit counters | Abuse and over-use prevention, operations, troubleshooting | Legitimate interest (Art. 6(1)(f)) – secure, predictable operation | Logs: 12 months; counters: 30 days |
| Affiliate referral identifier (cookie) | Attributing a referral to a purchase | Consent (Art. 6(1)(a)) via the cookie banner | 30 days |
We never see or store card data: payment happens on Stripe's interface and we only receive transaction identifiers and amounts.
4. Processors and recipients
The following categories of partners take part in processing:
- Hosting, database, authentication and server-function runtime (database stored in the EU).
- Stripe Payments Europe / Stripe, Inc. – payment processing and subscription management.
- E-mail delivery provider – transactional e-mail sent from notify.clearsitescore.com.
- Google (PageSpeed Insights API) – the scanned URL is sent for performance measurement. No personal data of yours is sent, only the address being scanned.
- AI provider – generating the action plan and keyword analysis from the technical scan data. Requests contain no account identifier or e-mail address.
We disclose data to authorities only where the law requires it. We never sell or rent your data.
5. International transfers
Some providers above also operate infrastructure in the United States. Such transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) or, where unavailable, on the Commission's Standard Contractual Clauses together with supplementary technical and organisational safeguards.
6. Security
- All connections are encrypted (HTTPS/TLS).
- Row-level security in the database ensures only you (and, where necessary, the operator's administrator) can access your reports and account data.
- Secrets and API keys are held in a dedicated secret store and never in source code.
- Privileges follow the least-privilege principle and access is logged.
7. Your rights
Under Articles 15–22 GDPR you may request access to your data, its rectification or erasure, restriction of processing, object to processing based on legitimate interest, and request data portability. You may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.
Send your request to hello@clearsitescore.com. We respond within one month at the latest.
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9-11, 1055 Budapest, Hungary, ugyfelszolgalat@naih.hu, +36 1 391 1400) or with a competent court.
8. United States residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect and why, to request a copy of it, to request deletion or correction, and not to be discriminated against for exercising these rights.
- Categories collected: identifiers (e-mail, IP), commercial information (orders, subscriptions), internet activity (use of the service), and technical data about the websites scanned.
- We do not sell personal information and do not share it for cross-context behavioral advertising.
- We do not collect sensitive personal information and do not use profiling for automated decisions with legal effect.
- Exercise your rights at the e-mail address above; requests are verified via the account e-mail. An authorised agent may act on your behalf.
We honour browser Do Not Track / Global Privacy Control signals: when such a signal is present, non-essential (marketing) cookies stay off.
9. Changes to this policy
We may update this policy from time to time and will notify you of material changes in the service or by e-mail. The current version is always available on this page with the version number and effective date shown in the header.