Privacy is important to us, so you have the option of disabling certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may impact your experience on the website. More information (Cookie Policy)
Publishing company: Stone Rank Kft.
Legal form: Hungarian limited liability company (korlátolt felelősségű társaság)
Registered office: Nyári Pál utca 15., 2724 Újlengyel, Hungary
Company registration number: 13-09-248479
Registry court: Budapest Környéki Törvényszék Cégbírósága (Registry Court of the Budapest Environs Regional Court)
Registered capital (törzstőke): 3'000'000 HUF
EUID: HUOCCSZ.13-09-248479
Tax number: 32904556-2-13
EU VAT number: HU32904556
Managing director (ügyvezető): Thibault Besson-Magdelain
Publishing director: Thibault Besson-Magdelain
Privacy contact: Thibault Besson-Magdelain, [email protected]
Contact and support email: [email protected]
Phone (WhatsApp only): +1 864 727 1587
Website: https://www.sorank.com
The data controller is Stone Rank Kft. Its full identification details, postal address and contact channels are set out in the company information above.
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR. Privacy requests are handled by the managing director and reach us at support (at) sorank.com
This Policy applies to the Sorank website, the Sorank platform and its features, the Sorank browser extension with its on-page SEO and GEO audit and its Google Search Console integration, and Google OAuth connections made by users. A separate Cookie Policy describes cookies and consent options.
Identity and contact data. Name, email address, company information, billing details, VAT number.
Account and usage data. Login activity, settings, feature usage, consumed credits, logs, internal analytics.
Billing and payment data. Invoices, transactions, payment references. We never store card details; payments are handled by Stripe. Starting a free trial requires a valid payment card, which is collected and stored by Stripe and never by us.
Technical data. IP address, browser, device identifiers, visited pages, error logs, cookies.
Attribution data. Where you have consented to attribution cookies, we record an anonymous visitor identifier, the campaign and the page through which you first arrived, and the sequence of channels across your visits. If you later submit a form containing your email address, that address is linked to the identifier so that we can reconstruct the path that led to your sign-up. This data is stored in our own database hosted in the European Union. Legal basis: consent. See Section 3.3 of the Cookie Policy.
Affiliate data. For participants in our affiliate programme: identity, payout details, referral and commission history, processed through Rewardful.
When you choose to connect your Google account to Sorank, we access only the information required to provide the features you activate. We never access Gmail content, private messages, documents, or any data unrelated to the integration you request.
Non-sensitive information we may access. Your primary Google email address, your public Google profile information such as your name and profile picture, and the identification information required to authenticate your account through Google's sign-in system. This is used only to create or connect your Sorank account and to display your profile information inside the application.
For features related to Google Search Console we may access your validated site data, including search performance, queries, pages, coverage and indexing information. This access is read-only: we never modify your Search Console settings, submit sitemaps, or change your site on your behalf.
For integrations involving Google Analytics partner features, Sorank may access the settings necessary to connect your account and enable partner functionality, used only to support configuration or synchronisation actions that you request.
Sorank may also run technical permission checks to ensure that your Google account has the correct access level for the features you want to use.
Sensitive information we may access. Some advanced features of the Sorank platform require read access to your Google Analytics data, which may include traffic metrics, acquisition metrics, engagement information and similar analytics data used to generate SEO or GEO performance reports. This Google Analytics access applies to the Sorank platform only; the Sorank browser extension and the Sorank MCP connector never access Google Analytics and connect to Google Search Console in read-only mode only.
In some cases we may also read user-permission information inside your Google Analytics account to confirm that Sorank can operate the integration correctly. These permissions are consulted only for verification and never altered.
How we use Google OAuth data. Only to deliver the functionalities you explicitly enable: connecting your Sorank account using Google login, generating SEO and GEO performance reports, analysing Search Console data to provide insights, synchronising Analytics data for audit or reporting features on the platform, verifying permissions, and building and showing your long-term Search Console history in the browser extension.
Sorank does not sell or rent Google user data; use it for advertising or marketing; share it with third parties except strictly necessary service providers operating under data processing agreements; use it to build unrelated profiles; combine it with external datasets for any purpose not directly related to the service; or store or access it beyond what is required to provide the feature you activated.
Sorank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
The core feature of the extension is to analyse a web page you choose and give you SEO and GEO recommendations. When you run an audit, the extension reads that page's content locally in your browser, including titles, meta tags, headings, images, links and text, to compute its scores. All analysis happens locally; the extension does not collect, store or transmit the content of the pages you browse, and only the page you actively audit appears in the report.
To complete the audit, the extension queries a small number of external services using only the address of the page or domain being audited, never your personal data: Google PageSpeed Insights and the Chrome UX Report for performance and Core Web Vitals, and RDAP for public domain registration information. These services receive only the public URL or domain you are auditing. The audit result is stored locally on your device so that it can be displayed and exported as PDF, JSON or CSV when you ask for it.
Separately from the platform, the extension lets you connect Google Search Console to keep a long-term history of your site's search performance, beyond the sixteen-month window Google itself provides.
When you connect Search Console in the extension, you grant read-only access through Google's OAuth consent screen (scopes: openid, email and webmasters.readonly). To retrieve and store your data, your read-only Google access token is sent over an encrypted connection to our backend hosted in the European Union (Supabase), which uses it solely to call the Google Search Console API on your behalf; the token is not used for any other purpose. At your explicit request we then store and retain the resulting performance data so that we can show you its evolution over time: clicks, impressions, click-through rate and average position, broken down by day, by query and by page, together with the email address of the connected Google account, which is used solely to attach the history to you. We never modify your Google account or your site.
Building this history is the core purpose of the extension. Therefore, unlike the platform OAuth integration described above, this history is retained for as long as you use the extension and is not deleted automatically thirty days after you disconnect, so that your history remains available if you reconnect. You can request its deletion at any time.
This data is hosted in the European Union and is never sold, rented, shared for advertising, or used to build unrelated profiles. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
If you disconnect Sorank from your Google Account, all tokens and any cached Google data used for the platform integrations are deleted within thirty days. We do not retain Google OAuth data beyond what is necessary to operate the service you activated.
The one deliberate exception is the long-term Search Console history of the browser extension: because keeping that history is the feature you requested, it is retained until you ask us to delete it. To request deletion, email support (at) sorank.com from, or stating, the email address linked to your Google account; we process the request within seven business days.
Where we rely on legitimate interest, you may obtain a summary of the balancing test we carried out by writing to support (at) sorank.com
6.1 No selling or commercial sharing. We never sell, rent or trade Google user data or personal data.
6.2 With whom we share data. We share limited data with processors that support the operation of Sorank and act only under our instructions. Each signs a Data Processing Agreement and cannot use the data for its own purposes.
An up-to-date list of our processors is available on request at support (at) sorank.com
6.3 Disclosure to third parties. We may disclose data only where legally required, for example to the Hungarian tax authorities, to courts or regulators, or to EU supervisory authorities. We do not disclose Google OAuth data to third parties unless legally obliged.
6.4 Google OAuth data sharing. Google OAuth data is never shared with external parties, never transferred to advertisers, never used to build profiles unrelated to Sorank's features, and never used for marketing. Access remains strictly scoped to the feature you activate. If you revoke access, all OAuth tokens and related cached data for the platform integrations are deleted within thirty days; the browser extension's long-term Search Console history is kept until you request deletion.
Your personal data may be transferred to, and processed in, countries outside the European Economic Area. These transfers comply with Articles 44 to 49 of the GDPR and are protected by the safeguards set out below.
The platform database, the attribution data and the browser extension's long-term Search Console history are stored in the European Union and are therefore not subject to an international transfer.
You may obtain a copy of the relevant Standard Contractual Clauses by writing to support (at) sorank.com
We regularly review the data protection practices of our processors to ensure that appropriate safeguards remain in place, and we implement supplementary technical and organisational measures where necessary, in accordance with the recommendations of the European Data Protection Board.
We use strictly necessary cookies, and optional analytics, marketing, attribution and functional cookies set only with your prior consent. See the Cookie Policy.
Sorank applies organisational and technical protections: TLS encryption, encrypted storage by supported providers, least-privilege access rules, continuous monitoring, and PCI DSS compliant payment processing through Stripe.
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we notify the competent supervisory authority within 72 hours and, where the risk is high, we notify you directly.
You may exercise your right of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, and your right not to be subject to a decision based solely on automated processing producing legal effects. Requests: support (at) sorank.com
To delete the Search Console history stored by the browser extension, email support (at) sorank.com with the email address linked to your Google account; we handle the request within seven business days.
We may verify your identity before processing a request, and we answer within one month, extendable by two months for complex requests.
Right to lodge a complaint. You may lodge a complaint with the Hungarian data protection authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11, Hungary
Website: https://www.naih.hu
If you reside in another Member State, you may also lodge a complaint with the supervisory authority of that State, and with the authority of the place where the alleged infringement occurred.
The platform generates content, suggests keywords and matches sites within the Backlink Network using automated processing. These operations do not produce legal effects concerning you and do not significantly affect you within the meaning of Article 22 of the GDPR. You may always request human review of a decision affecting your account by writing to support (at) sorank.com
Digital services provided after explicit consent may reduce or remove the statutory withdrawal right. The conditions are set out in the Terms and Conditions of Sale and in the Refund and Cancellation Policy.
To issue compliant invoices we require a billing address, a country of residence, and a VAT number for EU businesses. Invoices are issued by Stone Rank Kft., Hungary.
Sorank is not intended for individuals under 16. We delete such data when we become aware of it.
We may update this Policy for legal, technical or operational reasons. Important updates are displayed on the website or sent to users by email. The version applicable at any given time is the one published on this page.
For any question about this Policy, or to exercise your rights, write to support (at) sorank.com
Letters should be sent to the registered office shown in the company information above.
THEY TRIED SORANK BEFORE YOU


