Highlights
List yours
Privacy

ProofRank privacy notice

How information moves through a website check, your account and a public profile.

Updated October 5, 2026

What this notice covers

ProofRank is operated by Drishya Thapa. Questions about this service or your personal information can be sent to info@proofrank.net.

This notice explains how ProofRank handles information when you analyze a website, use an account, submit a project, claim a profile or send a problem report. It describes the current service; planned features shown elsewhere are not a statement that those integrations are active.

A website you visit through a ProofRank link is operated separately. Its own privacy practices apply after you leave ProofRank. Public website information can also contain personal information, so being publicly accessible does not make it appropriate to submit private or sensitive material.

Information you provide

Account records can include your display name, account identifiers, sign-in credential identifiers and security timestamps. Passkey verification uses a public key; the private passkey stays with your device or password manager. Recovery codes and session credentials are handled as protected verification material, not public profile information.

Project submissions contain the address, name, category and description you send, together with review status and any review correspondence. Ownership checks record the domain, verification method and claim outcome. Private prompt plans contain the questions, language and competitor domains you choose to save.

Problem reports contain the selected issue type, your description, a case reference and review status. If you are signed in, the report may be associated with your account. Include only the details needed to understand the issue, not passwords, payment information or another person’s private records.

Sign in with Google

If you choose Continue with Google, ProofRank asks Google only for the basic sign-in scopes (openid, email and profile). From your Google account it receives your Google account identifier, your email address when Google reports it as verified, and your name.

ProofRank uses this information only to create your account, sign you in and show your name in your account. It does not request access to your Gmail, Drive, contacts, calendar or any other Google data, does not sell it, does not use it for advertising and does not share it with third parties except the infrastructure provider that hosts ProofRank.

ProofRank’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Google sign-in from your account settings, or revoke ProofRank’s access at any time from your Google Account permissions page.

Information from website checks

The scanner requests publicly accessible website resources and derives bounded observations such as response status, redirects, page title, favicon information, markup signals and technical findings. These observations and their timestamps support reports and eligible public profiles.

The current scanner does not sign in to the target website, submit its forms or request your target-site password. The stored report is a set of derived findings rather than a saved copy of an entire browsing session. Do not enter URLs containing private access tokens or links to confidential documents.

How information is used

ProofRank uses this information to deliver requested checks, authorize access to private reports and account tools, review submissions, verify domain control, investigate reported problems and maintain service security. Relevant public project details are used for discovery only when publication requirements are met.

Security and operational records can include request identifiers, status information and abuse-prevention signals. The application uses a hashed abuse identifier for moderation intake rather than displaying a raw network address in the case. Infrastructure providers may also process network and device information to deliver and protect requests.

Private work and public information

Community drafts, uploaded images and review notes are stored with the author’s account and project. Published articles display the author’s display name, project, article content and referenced images. Other uploaded images remain private. Withdrawing an article, disabling its author or removing the project from public discovery removes public access; it does not erase the stored article or media.

Discovery upvotes, signed-in profile views and explicit requests for alternatives are associated with your account and the project. Public sections show aggregate counts, not voter or reader identities. Views are deduplicated per account and day and counted as unique readers within the chosen period. The application does not collect anonymous visitor fingerprints for these sections.

Running an analysis does not automatically publish a profile. Private reports require the access issued to the requesting browser. Account workspaces, draft prompts, ownership workflows and review correspondence are not public discovery pages.

An approved public profile may show the domain, project name, description, category, favicon and eligible measured findings. Deleting or signing out of an account is not the same as removing a public website profile. Corrections and removal concerns are reviewed separately.

Cookies and browser storage

ProofRank uses cookies for sign-in sessions, private report access and protected preview access where applicable. The selected light or dark theme is saved in browser storage. Security services may use additional information or storage to distinguish legitimate requests from abuse.

You can clear or restrict cookies and local storage in your browser. Doing so can sign you out, reset your theme and remove access to a report. An access credential expiring or being cleared does not by itself erase the underlying scan or account records.

Infrastructure and connected services

Cloudflare provides hosting, request protection and the storage services used by this deployment. Authorized service operators can access information needed to run the service and review cases; a private report is not a promise that no operator or infrastructure provider can process it.

External sign-in, payment, search-analytics and AI services have separate data practices when enabled. AI visibility checks, Google Search Console and Google Analytics connections and paid checkout are not active yet; this notice will be updated before any of them is turned on.

Storage, expiry and account changes

Generated PDF reports use the same private access checks as the browser report. A cached PDF is available for up to 24 hours and expired cached files are removed during subsequent download requests. A copy you download remains on your device after browser access expires; keep it private when sharing or storing it.

Different records have different lifecycles. Sign-in and report access expire, while scan evidence, submissions and moderation records may remain stored beyond that access period. There is no single automatic deletion period for all records.

The account-removal operation disables the account, revokes its active sessions and removes ownership associations, recovery codes and private prompt drafts. It does not erase every historical review, security record or published website profile. A personal-data request can identify additional records that need review.

Retention decisions need to consider the requested service, ongoing reviews, abuse prevention and any applicable legal obligations. Do not assume that a resolved case, archived prompt or closed browser means its records have been deleted.

Your choices and requests

Depending on the law that applies to you, you may have rights to request access, correction, deletion or a copy of your personal information, or to raise an objection or restriction request. These rights can have conditions and exceptions. ProofRank may need to verify that a request concerns your own information before acting on it.

Use Report a problem and choose Privacy or personal-data request. Describe the account or page involved and the outcome you are requesting without including a password, recovery code or identity document. Keep the case reference. Submission starts a review; it is not confirmation that deletion or another requested action has already happened.

Open Report a problem or email info@proofrank.net for privacy requests. Do not include passwords, recovery codes, or access tokens.

Changes to this notice

This notice may be updated as the service and its enabled integrations change. The date at the top identifies this version. Review the relevant information before choosing a newly available feature, especially one that connects another account or sends information to an external provider.

Privacy notice | ProofRank