Privacy Policy
Last updated: June 16, 2026
This Privacy Policy explains how dachecker.io ("we" or "us") collects, uses, stores, and shares your personal information when you use our website and SEO tools. By using our service you agree to the practices described below.
1. Who we are
dachecker.io is an SEO metrics platform that provides bulk Domain Authority (DA), Domain Rating (DR), and Trust Flow (TF) checking tools. We are the data controller for personal information collected through this website.
You can reach us at: support@dachecker.io
2. Information we collect
Account information. When you sign up, we collect your email address and a hashed password stored securely in Supabase.
Usage data. We track how many checks you run on each tool (DA, DR, TF, combined) to manage your plan quota. This includes timestamps, tool type, and domain count, but not the actual domains you check.
Input data. Domains or URLs you enter are sent to (Moz, Ahrefs, Majestic) to fetch metrics. We do not store your input domains after the request completes.
Payment information. All payments go through Paddle (see Section 5). We never see, store, or touch your card number or CVV.
Technical data. Server logs may include your IP address, browser type, device type, and pages visited. We use this for security and to fix issues.
Newsletter email. If you subscribe to updates, we store your email for that purpose only.
3. How we use your information
- To create and manage your account
- To track usage against your subscription quota
- To process subscription payments via Paddle
- To send transactional emails (account creation, payment receipts from Paddle)
- To send newsletter updates if you opted in (unsubscribe any time)
- To detect abuse and enforce rate limits
- To fix bugs and improve our tools
4. Legal basis for processing (GDPR)
If you are in the EEA or UK, we process your data under these legal bases:
- Contract — we need your email and usage data to run the service you signed up for.
- Legitimate interests — security monitoring and fraud prevention.
- Consent — newsletter subscription. You can withdraw this any time.
- Legal obligation — where required by law.
5. Paddle — our payment processor
All paid subscriptions are processed by Paddle.com Market Limited ("Paddle"), who acts as our Merchant of Record. Paddle is the legal seller for all transactions. Charges on your bank statement will show as PADDLE.NET*DACHECKER or similar.
When you buy a subscription, Paddle collects your name, email, billing address, card details, and IP address. Paddle uses this to process your payment, handle tax compliance, issue receipts, and manage refunds.
Paddle is an independent data controller for payment data. Their privacy policy is at paddle.com/legal/privacy.
We receive from Paddle only: your email address, subscription plan, subscription status, and billing country.
6. Third-party services we use
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Email, usage counts, plan |
| Paddle | Payment processing | Email, billing info (handled by Paddle directly) |
| Moz | Domain Authority data | Domain names you query |
| Ahrefs | Domain Rating data | Domain names you query |
| Majestic | Trust Flow data | Domain names you query |
7. Cookies
We use the following cookies:
- Authentication cookies — set by Supabase to keep you logged in. These are required if you use a signed-in account.
- Preference cookies — to remember things like your theme preference.
We do not use advertising, tracking, or analytics cookies. You can manage cookies through your browser settings.
8. Data retention
- Account data — kept while your account is active. Deleted within 30 days of an account deletion request.
- Usage data — kept for 90 days for billing verification, then deleted.
- Payment records — kept by Paddle per their legal obligations (typically 7 years for tax records).
- Server logs — automatically deleted after 30 days.
9. Your rights
Depending on where you are, you may have the right to:
- Access — request a copy of the data we hold about you
- Correction — fix inaccurate data
- Deletion — ask us to delete your account and data
- Portability — get your data in a readable format
- Objection — object to certain types of processing
- Withdraw consent — unsubscribe from newsletters at any time
To use any of these rights, email us at support@dachecker.io. We will reply within 30 days.
10. Data security
We use HTTPS for all data in transit, hashed passwords (never plain text), Supabase Row-Level Security, and restricted API key access. No system is 100% secure, and we cannot guarantee absolute protection.
11. International data transfers
Your data may be processed outside your country (for example, Supabase and Vercel run on global infrastructure). Where needed, Standard Contractual Clauses are in place to protect your data.
12. Children
Our service is not for anyone under 16. If you think a child has given us their data, contact us and we will delete it right away.
13. Changes to this policy
We may update this policy from time to time. We will email registered users about any major changes. The date at the top of this page always shows the latest version.
14. Contact
Any privacy questions? Email us at: support@dachecker.io

