Page Auditor privacy policy
Version 1.0 · last updated September 25, 2026
In brief
- Page Auditor by Deed Bangladesh audits the page you open it on, inside your browser. Nothing about that page is sent to us, and everything the extension does runs locally unless you choose one of the three things below.
- We receive something only when you choose to: press Share on an audit, ask for a free expert review, or sign in to the free account to use the AI features. Each has its own consent box, and we receive only what is listed below for it.
- Your email address, when you give one, is used for what you asked (the review, the sign-in code) and for our own occasional emails only if you tick that separate box.
- When you use an AI feature, a short summary of the audit (not your email) goes to our server and to our AI provider to write the answer.
- We keep a shared audit or review request for up to 12 months, and an account until 12 months after you last use it. You can delete any of it at any time.
- We never sell what you share, never share it with anyone else, and never use it for advertising profiles or to judge anyone's creditworthiness.
- Some optional features ask public services about the site you are auditing. The table below lists each one and what it receives.
Who we are
The extension is made by Deed Bangladesh IT Limited, 101 Deed Avenue, Rajshahi 6230, Bangladesh. Questions about this policy or your data: support@deedbd.com.
What happens on your device
When you press Run audit, the extension reads the tab you are looking at: its text, headings, links, images, structured data, the response headers your browser can see, its speed timings and the styles needed for the colour-contrast check. It then fetches that site's own robots.txt, sitemap and raw HTML. All of this is analysed in your browser and stays there. The extension reads a tab only after you click its icon on that tab, or, if you choose "Allow all sites" in its settings, only when you press Run on the tab you are looking at. It does not read your browsing history, your other tabs, your cookies or what you type into forms. (When it fetches the site's own files from inside the tab, your browser sends that site its own cookies, as it does for any request to it; the extension does not see or keep them.)
Mentions and Citations. These sections help you find pages and business directories that name your site. Buttons such as "Open on Google" or "Search Google" open a normal browser tab with the search words shown on the button (your brand, domain, phone number or street address). "Read these results" reads the Google results page you are looking at, only when you press it, and only on your device: organic results are listed, ads are counted but never listed. "Check links" asks for Chrome's permission to access all sites and then fetches each page in your list directly from that page's own website, without your cookies or referrer, to see whether it links to or mentions your site. Only that result is kept, never the page. Your lists, statuses and results are stored only in your browser (the last five captures per site) and can be cleared at any time. Nothing from these sections is ever sent to Deed Bangladesh.
Two optional switches in the extension's settings are off until you turn them on. "Show the bar on every website" asks Chrome for access to all sites, and then shows a small summary bar on the sites you visit. The bar reads that page in your browser and, at most once per site every 12 hours, fetches that site's own robots.txt, sitemap and llms.txt. "Live domain info" additionally sends the domain name of each site you visit (never the page address or its content) to three public services, RDAP, Tranco and the Internet Archive, to show its age and popularity rank, at most once per domain every 24 hours. None of this is sent to us. You can switch either off at any time.
Stored on your device (in Chrome's extension storage): your settings (theme, the quick-bar preferences and the sites you listed for it, default keywords), any API keys or Moz credentials you add (only ever sent to their own provider), the random install ID, and the delete codes for audits you shared. Removing the extension removes them.
Outside services each optional feature contacts
All requests use HTTPS. Nothing is sent until the feature is used, and none of it is analytics or advertising. A "host name" is the site's name (www.example.com); a "page address" is the full address of the page.
| Service | When | What it receives |
|---|---|---|
| The site you are auditing | Every audit | Ordinary requests for that site's own robots.txt, sitemap, the page's raw HTML and a few standard files (llms.txt, security.txt, ads.txt, humans.txt), as your browser would make them. |
| Cloudflare DNS-over-HTTPS (cloudflare-dns.com) | Domain tab: DNS records | The site's host name and DNS names built from it (such as its _dmarc record and DKIM selectors). Not the page address. |
| rdap.org, and the domain registry it forwards to | Domain tab: registration details | The site's registered domain name. |
| ipwho.is | Domain tab: IP and hosting | The site's IP address, taken from its DNS record. |
| tranco-list.eu | Domain tab: popularity rank | The site's host name. |
| archive.org (Internet Archive) | Domain tab: history | The site's host name. |
| Mozilla HTTP Observatory (observatory-api.mdn.mozilla.net) | Only when you press the security scan button | The site's host name. |
| Wikipedia (en.wikipedia.org) | Only when you press the entity look-up, or switch on automatic look-ups (off by default) | Up to 10 names found on the page, one per request. |
| Google PageSpeed Insights and Chrome UX Report (googleapis.com) | Only if you add your own Google API key | The page address (and its origin for real-user data), with your key. |
| Open PageRank (openpagerank.com) | Only if you add your own key | The site's host name, with your key. |
| Moz Links API (lsapi.seomoz.com) | Only with your own Moz credentials, when you press the button or switch it on | The site's host name, with your credentials in the request's authorization header. |
| The sites the page links to | Only when you press "Check all link statuses" | A HEAD (then GET) request for each linked address, with no cookies and no referrer. At most 300 per run. |
| Deed Bangladesh (deedbangladesh.com) | Only when you press Share, ask for a free review, sign in to the free account, use an AI feature, or ask to delete | What is listed in the sections below, for that action only. |
| Our AI provider (Anthropic, Google or Groq, depending on our configuration) | Only when you use an AI feature while signed in to the free account | The short audit summary described under "The free account and the AI features", passed on by our server. Not your email address or anything else about you. |
Each of these services has its own privacy policy. They receive your IP address as part of any web request, as they would if you visited them yourself.
What is sent to us, and only when you press Share
Sharing is a separate button with its own consent box, and the extension shows you what it will send before you confirm. When you do, we receive:
- The audit report
- The page address, its title, its scores and every check with its evidence, and the page text the audit quotes (such as headings, image alt text, the link list and robots.txt).
- A random install ID
- Created by the extension the first time you use a feature that needs it (sharing, a review request, or signing in). It lets you delete everything you shared from inside the extension. We store only a one-way hash of it, never the ID itself.
- Your email address, if you type one
- Stored with the audit so you can ask us to delete it by email, and used to contact you only if you tick the box below.
- Your note, if you write one
- Up to 600 characters.
- Whether you ticked "you may email me"
- A separate, optional box. Without it we do not email you about our services.
- The consent version and time
- Which wording you agreed to (now version 2026-09-25.1) and when.
- The extension version
- So we know which build sent the audit.
- Your approximate country
- The two-letter country Cloudflare attaches to the request. We do not store your IP address.
- An abuse-prevention hash
- A salted hash of your IP address and browser type that changes every day, used only to limit how many audits one connection can send. It is deleted after 30 days.
Our website is delivered and protected by Cloudflare, so your request passes through Cloudflare on its way to us. We refuse audits of private or internal addresses (such as localhost or a home network).
A free expert review, only when you ask for one
The review is a separate button with its own consent box. When you ask, we receive the same audit report, install ID, version, country and abuse-prevention hash as for a share, plus your email address (required, because that is where the review goes), your note if you write one, and whether you ticked the separate box for our occasional emails.
- We first email you a link. Nothing reaches our team until you open it and press Confirm. A request you never confirm is deleted within 3 days.
- We use the address to confirm the request and to send you the review, which may be a one-page PDF summary of your own audit (your scores and the three things to fix first) and a reply from our team.
- We do not use it for anything else unless you ticked the separate box.
The free account and the AI features
The AI features (a written report, title and description suggestions, a chat about the audit, and a few ready-made tasks) need a free Deed account. It is an email address, with no password.
- Signing in: we email you a link; the page it opens shows a 6-digit code when you press a button, and you type the code into the extension. The extension then keeps a sign-in token in its storage; we keep only a hash of it. It lasts 90 days from your last use and you can sign out at any time.
- What we store: your email address, when you confirmed it, whether you ticked the separate box for our occasional emails, one-way hashes of the installs you signed in on, hashes of the sign-in tokens, and how many AI calls you made each day (for the daily limits).
- What the AI receives: when you use an AI feature, the extension sends our server a short summary of the audit: the page address, its scores, the main issues it found, and any keyword or question you type (for a title and description suggestion, the page's current title and description too). Our server passes that text, and nothing about you, to our AI provider (Anthropic, Google or Groq, depending on our configuration) to write the answer. We do not keep the summaries or the answers.
- Limits: each account has a small daily allowance, and all accounts share a daily total, so the free features stay free.
How we use shared audits
- To improve the extension: which checks fail most, which pages it reads badly.
- To see which kinds of sites people check, in aggregate.
- To reply to you about the audit, and to email you about our website and SEO services, only if you ticked "you may email me". Reply "stop" at any time and we stop.
- For a review request: to confirm it and send you the review. For the account: to send the sign-in code. Our own occasional emails only if you ticked that separate box.
We do not sell or rent shared audits or email addresses, and we do not share them with anyone else. The only other parties that handle them are the companies that run our website, database and email for us, and they do so only to provide that service. Our use of this data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Our website runs on servers that may be outside your country.
How long we keep it
- A shared audit, with your email and note: 12 months from the day you shared it, then it is deleted automatically. The one exception: if you asked us to contact you and we are in an active conversation with you, we keep it until that conversation ends. You can still delete it at any time.
- A review request you never confirm: 3 days.
- The free account: until you delete it, or 12 months after you last used it. An account whose code was never entered is deleted after 7 days. Sign-in links and codes expire within 24 hours and are removed within days; ended sign-in tokens after 30 days.
- The abuse-prevention hash: 30 days.
- An email deletion link: it works for 24 hours and once; the request itself is removed two days after it expires.
Deleted data may remain in routine server backups until those backups are overwritten.
Your choices and rights
- Delete from the extension. The delete option in the extension removes every audit shared from that installation, or a single one, straight away. It uses the random install ID, so it works without an email address.
- Delete by email. Use the form below. We email the address a one-time link, and everything stored under that address (shared audits, review requests and the free account) is deleted when you press Delete on the page it opens.
- Delete or leave the account. The account settings in the extension let you sign out (on this install or everywhere) or delete the account at once.
- Stop emails. Reply "stop" to any email from us, or write to support@deedbd.com.
- A copy, or a correction. Write to support@deedbd.com and we will answer within 30 days.
Depending on where you live, you may have further rights over your personal data, and you can complain to your local data-protection authority.
Delete what you shared, by email
Type the email address you gave when you shared. If audits are stored under it, we send it a link that works once, for 24 hours.
The consent wording
This is exactly what the extension shows at each choice (version 2026-09-25.1). The version is stored with every shared audit, review request and account.
Share
Share this audit with Deed Bangladesh. We receive the audit report shown here (the page address, its scores and findings, and the page text the audit quotes, such as the title, headings and link list), the extension version, a random ID for this install and your approximate country. We keep it for up to 12 months to improve the tool and to see which kinds of sites people check. We never sell it or share it with anyone else. You can delete it at any time, from the extension or at deedbangladesh.com/privacy/page-auditor.
Email (optional). If you add it, it is stored with this audit so you can ask us to delete it by email.
Note (optional, up to 600 characters). Stored with this audit.
Deed Bangladesh may email me about this audit and about its website and SEO services (optional). I can ask them to stop at any time.
Free expert review
Ask Deed Bangladesh for a free expert review of this audit. We receive the audit report shown here, your email address and your note, and use your email only to confirm this request and to send you the review. We first email you a link: nothing happens until you open it and press Confirm. The review is free and there is no obligation. We keep the request for up to 12 months, never sell it or share it with anyone else, and you can delete it at any time.
Also send me occasional emails about Deed Bangladesh's website and SEO services (optional). I can unsubscribe at any time.
Free account for the AI features
Create a free Deed account with this email address, to use the AI features. We email you a link that shows a 6-digit code to confirm the address is yours. When you use an AI feature, a short summary of the audit (the page address, its scores, the main issues and any keyword or question you type, never your email) is sent to our server and to our AI provider to write the answer. Everything else in the extension keeps running in your browser. We keep the account until you delete it, or until 12 months after you last use it.
Also send me occasional emails about Deed Bangladesh's website and SEO services (optional). I can unsubscribe at any time.
Security
Shared audits travel over HTTPS. We store only hashes of the install ID and of delete codes, show email addresses to our team masked unless one is needed, limit how often anyone can send or delete, and restrict access to the staff who work with shared audits.
Children
The extension is a tool for website owners and is not directed at children under 13. If you believe a child has shared an audit with us, write to support@deedbd.com and we will delete it.
Changes to this policy
Each version of this policy has a number and a date, shown at the top. If a change affects what the extension sends us, the consent wording gets a new version too, and the extension asks again before you next share. We do not apply a change to audits you shared before it without telling you.
Contact
Deed Bangladesh IT Limited, 101 Deed Avenue, Rajshahi 6230, Bangladesh. Email support@deedbd.com. More about the extension: Page Auditor. Our website's general privacy policy: Privacy Policy.
