Privacy Policy

Privacy Policy

Last updated: September 4, 2026

At Traffic Torch (traffictorch.net), we are committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our website, free tools, reports, Pro Dashboard, and paid subscription services ("Service").

We designed Traffic Torch with a dual approach:

• Core audits (OFUX, standalone tools) are 100% client‑side – all analysis happens in your browser using client‑side JavaScript and a secure CORS proxy for fetching public page content. We do not store, log, or send your analyzed URLs, page content, screenshots, or report data to our servers.
• Pro Dashboard requires server‑side handling to connect to Google Analytics 4 and Search Console via OAuth. We securely store your OAuth refresh tokens and temporarily cache analytics data (sessions, users, clicks, impressions, top content, etc.) to display your dashboards efficiently. This data is encrypted and never shared with third parties.

1. Information We Collect

We collect only the minimal data necessary to operate the Service:

• No account required for free use: You can run audits anonymously without logging in or providing any personal information.
• Pro subscription: To access Pro features (25 daily runs, full modules, CSV exports, etc.), you create an account with an email address and password (handled securely). We store only your email and Stripe customer ID for subscription management.
• Pro Dashboard (GA4/GSC connections): When you connect your Google Analytics 4 or Search Console property, we securely store OAuth refresh tokens and encrypted cached report data (metrics, dimensions, top content, traffic sources, etc.) to provide real‑time analytics and custom date ranges. This data is only accessed to display your dashboard and is never exposed to other users or third parties.
• Usage analytics: We use Google Analytics (GA4) with IP anonymization enabled to understand site traffic, popular tools, and improve the Service. No personally identifiable information is collected via GA. You can opt out at any time using the cookie consent banner, your browser's Do Not Track setting, or browser extensions (e.g., uBlock Origin, Privacy Badger).
• Technical data: Browser type, device type, approximate location (country/region only, never precise), referrer URL, and pages visited, all anonymized and aggregated.
• No cookies for tracking: We do not use persistent tracking cookies, third‑party ad trackers, or cross‑site identifiers. Any necessary session cookies expire when you close the browser.

2. How We Use Information

We use collected data solely to:

• Provide and improve the Service (e.g., fix bugs, add requested features)
• Manage Pro subscriptions and send important service emails (e.g., renewal reminders, rare updates)
• Display your connected GA4/GSC analytics in the Pro Dashboard
• Understand aggregate usage patterns via anonymized analytics
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

3. Third-Party Services

• Stripe: All payments are processed directly by Stripe (PCI DSS Level 1 compliant). We never see or store your full payment details — only a customer ID and subscription status.
• Google Analytics 4 & Search Console APIs: Used exclusively for the Pro Dashboard to fetch your analytics data. OAuth tokens are stored securely and refreshed automatically. Data is cached temporarily for performance.
• Google Analytics (anonymized): Usage stats only. Data is processed under Google's privacy terms (you can review Google's privacy policy here).
• CORS Proxy: We use a public/open‑source CORS‑anywhere proxy (or self‑hosted equivalent) solely to bypass browser same‑origin restrictions when fetching public webpage HTML, no data is retained by the proxy.

4. Data Storage & Security

All server‑side data (Pro emails, Stripe IDs, OAuth tokens, cached GA4/GSC reports) is stored securely using industry‑standard encryption (HTTPS everywhere, secure hosting on Cloudflare Workers / Pages). Cached analytics data is encrypted and retained only as long as needed to serve your dashboard requests. We do not store analysis results from the core audit tools (OFUX, etc.) – those remain 100% client‑side. Access to Pro data is restricted and protected by strong authentication.

5. Your Rights

Under Australian Privacy Principles (and where applicable GDPR/CCPA):

• Access, correct, or delete your Pro account data (email/login).
• Opt out of analytics tracking at any time.
• Disconnect GA4/GSC from your Pro Dashboard at any time – this revokes OAuth tokens and removes cached data.
• Request deletion of your Pro account can be done on your account page (Pro Dashboard). Subscription will be canceled via Stripe; data removed within 30 days.

We respond to valid requests within 30 days.

6. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated date. For Pro users, we may notify via email for material changes. Continued use after changes constitutes acceptance.

8. Contact Us

If you have questions about this Privacy Policy or our practices, contact us via:

• Contact Form

Traffic Torch is Privacy first by design – core audits in your browser, Pro Dashboard analytics securely cached. Let's keep SEO, UX & AI private and powerful. 🔥