Privacy policy

DR Buddy tracks the Domain Rating of websites and checks that your backlinks are still in place. This page explains, in plain language, what we collect to do that, who helps us run the service, and what you can ask us to do with your data. We don't sell your data, show ads or use advertising trackers.

What we collect

• Your account: your email address and a securely hashed password. Sign-in is handled by our database provider, Supabase.
• What you add: the domains you track, your DR goals, the backlinks you monitor (the page, where it links to, and any note or price you enter), and the results of backlink scans you run.
• Search Console uploads: if you upload a Google Search Console export, we keep the page addresses, searches and their numbers (clicks, impressions, position) so you can come back to them. We never connect to your Google account. Uploading again replaces the old data.
• Billing: if you subscribe to Pro, Lemon Squeezy handles the payment as the merchant of record. We receive your subscription status and renewal dates, never your card details.
• Support messages: the name, email address and message you send through the contact form.
• Limited technical data: to stop abuse, we keep a scrambled (hashed) version of your IP address for a short time when you look up a domain or send a message, which lets us apply hourly limits. When someone clicks an embedded DR badge, we record which site the click came from, not who clicked.

What's public

Anyone can look up the Domain Rating of any website on DR Buddy. Tracked domains have a public page showing their DR history, and are listed in our sitemap. These pages show the domain and its DR, never who tracks it. The backlinks you monitor and your scan results are private to your account.

Services that help us run DR Buddy

We share only what each service needs to do its job:

• Supabase stores your account and data. Vercel hosts the app.
• Ahrefs receives domain names to return their Domain Rating.
• DataForSEO receives domain names and page addresses for Link Health Check, backlink scans and checking pages that block us.
• Lemon Squeezy processes Pro payments and runs our affiliate program.
• An AI model, reached through Vercel AI Gateway, receives a domain and its recent DR history when you ask for improvement advice.
• An email provider delivers sign-in emails and alerts us to new support messages.

To check your backlinks, our servers also visit the pages you list, the same way a browser would.

Cookies and local storage

• We keep you signed in using your browser's local storage, and remember there which milestone celebrations you've already seen.
• Our affiliate program uses a script from Lemon Squeezy. When you arrive through an affiliate's link, it sets a cookie and uses browser information to recognise your visit, so the affiliate gets credit if you subscribe.
• We don't use analytics or advertising cookies.

How long we keep it

We keep your account data while you have an account. Hashed IP addresses used for lookup limits are deleted after two days. Records of individual link checks are deleted after a year. When you delete your account, your domains, links and scan results are deleted with it. Domain Rating history for a domain isn't personal data and may be kept to power public DR pages.

Your choices

You can remove domains and links yourself at any time. To get a copy of your data, correct it, or delete your account, contact us and we'll take care of it. Depending on where you live, you may have further rights under laws such as the GDPR, and you can complain to your local data protection authority.

Children

DR Buddy isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll let account holders know by email.

Contact

Questions about privacy? Send us a message through the contact form.