Privacy Policy
Last updated: October 6, 2026
Your privacy matters to BacklinkIndexer. This policy sets out which information we collect, what we do with it, and what control you have over it.
1. What we collect
Your account
Opening an account gives us your name, your email address and a password, which we keep only as a hash. When you sign in with a social provider instead, that provider passes us your name and email address.
Payments
Payments are processed from start to finish by Stripe, Razorpay and Cryptomus, our payment partners. Card numbers, bank details and other sensitive payment data are never stored on our servers. What reaches us is a confirmation of the transaction and the amount that was paid.
The links you submit
Links submitted for indexing are stored so that we can carry out the request and show you your submission history. The content of the pages behind those links is neither read nor stored by us.
How the site is used
Our servers keep standard logs: IP address, browser type, pages visited and the time of each request. We use them to keep the service secure and to make it perform better.
Two analytics tools, Google Analytics and PostHog, help us measure use of the site and the product. They record the pages viewed and the things clicked, an approximate location worked out from the IP address, the kind of device and browser, and whether a visit ended in a sign-up or a purchase. PostHog can additionally record how a page was used during a visit; anything typed into a form is left out of every such recording.
Where you came from
The first time you visit, we note the campaign tags on the link that brought you (utm_source is one example), the site that referred you and the first page you opened. Should you go on to create an account, these details are stored with it, which tells us which channels bring people to us.
2. What we use it for
- Running, maintaining and providing the BacklinkIndexer service.
- Handling the links you submit and keeping your credit balance.
- Taking payments and sending receipts for them.
- Sending you important service updates, security alerts and replies to support requests.
- Spotting and stopping fraud, abuse and security incidents.
- Meeting our legal obligations.
Your personal information is not sold or rented, and it is not shared with third parties for marketing purposes.
3. Who we share it with
Data leaves us only in these limited cases:
- Payment processing: Stripe, Razorpay and Cryptomus are given what they need to process your payments, and handle it under their own privacy policies.
- Analytics: the usage data described in section 1 goes to Google Analytics and PostHog, each under its own privacy policy. Your name, email address and password are not sent to Google Analytics. After you sign in, PostHog is also given the name and email address on your account, which lets us see how the product is used and helps us when you ask for support. Your password is never sent to it.
- The law: information may be disclosed when a law, a regulation or a valid legal process requires it.
4. Security
Your information is protected by measures that are standard in the industry: encrypted connections (TLS/SSL), passwords stored as hashes, and secured server infrastructure. We take reasonable care, but no way of sending or storing data is completely secure.
5. How long we keep it
Account data is kept for as long as the account stays active. Submission history is kept so that your records remain available to you. If you ask us to delete your account, your personal data is removed within 30 days, unless the law requires us to keep it or a legitimate business purpose, such as preventing fraud, does.
6. Cookies
The site sets only a few cookies:
- Essential cookies hold your sign-in and protect your session.
- A first-visit cookie records how you reached us: the campaign tags on the link you followed, the referring website and the first page you opened. It is kept for 90 days.
- Analytics cookies from Google Analytics (names beginning
_ga) and from PostHog (names beginningph_) are how we count visits and learn how the site is used. They are kept for up to two years.
A small notice on your first visit asks about the last two kinds. Making no choice within a few seconds is taken as acceptance. The “Cookie settings” link at the foot of our public pages lets you change your answer whenever you like. If you decline, both kinds are removed and are not set again, your visit is not linked to a first-visit source, Google Analytics gets only cookieless signals without your address, and PostHog gets nothing at all.
No advertising cookies are used. Your browser’s settings let you block or delete cookies; the site will still work, although staying signed in depends on the essential ones. Google also provides a browser add-on that opts you out of Google Analytics across all sites.
7. Your rights
The law where you live may give you the right to:
- see the personal data we hold about you;
- have inaccurate information corrected;
- have your personal data deleted;
- receive your data in a portable format;
- withdraw consent, where we rely on consent to process your data.
To use any of these rights, write to [email protected].
8. Children
BacklinkIndexer is not meant for anyone under 18, and we do not knowingly collect children’s personal information. If we learn that a child’s data has been collected, we will act promptly to delete it.
9. Changes to this policy
This policy may be revised from time to time. Registered users are told of material changes by email or by a notice in the app, and the “Last updated” date at the top always shows the latest revision.
10. Contact
Questions or concerns about this policy can be sent to [email protected].