Privacy Policy

Overview

RealRank (“we”, “us”) operates a public leaderboard that ranks websites by verified organic search performance. This policy explains what we collect, how we use it, and the choices you have. We collect the minimum needed to run the service and never sell your data.

Information we collect

• Google account identity. When you connect Google, we receive your Google account email address and a unique identifier, used solely to create and identify your account.
• Google Search Console data. With your permission (the read-only webmasters.readonly scope), we read the list of your verified properties and their aggregate organic click totals (last 7 and 28 days) for the properties you choose to publish.
• Content you publish. Site name, URL, description, and category you choose to display on the public leaderboard.
• Basic technical data. Standard server logs and a session cookie required to keep you connected. We do not use advertising trackers.

How we use your information

• To compute momentum and volume rankings from your click totals.
• To display the sites you choose to publish on the public leaderboard.
• To refresh your published sites’ click totals on a schedule.
• To operate, secure, and improve the service.

Only the aggregate numbers and details you choose to publish are shown publicly. Nobody else ever sees your individual search queries, pages, countries, or devices, and none of that detail appears on the public leaderboard.

Some private tools inside your own dashboard — such as Search leaks — do read query- and page-level Search Console data to show you your own analysis. That detail is fetched read-only when you open those tools, is visible only to you, and is never published to the leaderboard or shown to anyone else.

Google user data — Limited Use

RealRank’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We only request read-only Search Console access.
• We use the data solely to provide and improve the leaderboard features you can see.
• We do not sell Google user data or use it for advertising.
• We do not transfer Google user data to third parties except as needed to operate the service (see “Service providers”), for security, or to comply with law.
• No humans read your data except with your consent or for security.

How we store and protect it

Your Google refresh token is encrypted at rest using AES-256-GCM and is only ever decrypted on our servers immediately before an authorized API call. It is never sent to the browser. Access to production data is restricted, and public reads are limited by database row-level security.

Service providers

We rely on a small number of processors to run the service:

• Supabase — authentication and database hosting.
• Vercel — application hosting.
• Google — source of the Search Console data you authorize.

Data retention & deletion

You can unpublish any site at any time, or disconnect Google from your dashboard — which removes your stored access token. To delete your account and all associated data, email us at privacy@realrank.lol and we will remove it promptly. You can also revoke RealRank’s access at any time from your Google account permissions.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. Contact us at privacy@realrank.lol to exercise them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions? Email privacy@realrank.lol.