Privacy Policy
Last updated . This site is operated by Michael Lip, trading as autom8, Moniuszki 16, 44-240 Zory, Poland. Questions go to support@toolsthatrank.com.
What this site collects
There is no account system, no login and no contact form. The site doesn't set advertising cookies or build an advertising profile of you. The only cookies it sets are the two Google Analytics ones described under Analytics and cookies, and in the EEA, the UK and Switzerland they're only set after you accept them.
Third parties that receive your data
Loading this page sends your IP address and browser details to the following services. That transfer is what makes them work, and apart from Google Analytics in the EEA, the UK and Switzerland, it happens before you interact with anything.
- GitHub Pages hosts the site and processes your IP address to serve it.
- Google Fonts serves the typefaces from fonts.googleapis.com and fonts.gstatic.com, which receives your IP address.
- Plausible Analytics may be enabled to count visits. Plausible is cookieless, stores no personal data and does not track you across sites.
- A first-party click counter at toolsthatrank-licence.lipmichal.workers.dev records one request when a page opens and one when a checkout link is clicked. It sets no cookie, stores no identifier and keeps nothing that survives the page. The cookie banner asks Cloudflare for your country through the same address.
- Google Analytics measures visits and clicks once it's allowed to run. In the EEA, the UK and Switzerland that only happens after you press Accept. The details are under Analytics and cookies.
Analytics and cookies
I use Google Analytics 4 to see which channels send people to toolsthatrank.com, such as a social post or a search result, and what they do once they're here. It shows me which posts and pages are worth the time. I don't use it for ads, and I never sell what it collects.
With analytics on, the page sends Google the pages you view, the link or campaign tag that brought you, your device type, browser, screen size and language, and an approximate location. It also counts a few actions, such as opening the checkout, completing a purchase, following a link to another site, downloading a file or scrolling to the end of a page.
Before any page address goes to Google, the page removes every query parameter except the utm_ campaign tags and drops everything after the #, so the licence key on the delivery page never reaches Google. After a completed purchase, the delivery page does send Google the product you bought and its Stripe checkout reference, so I can match the sale to the payment. Google reads your country and city from your IP address and then drops the address. GA4 doesn't log or store IP addresses. I never send Google your email address or card details.
Two first-party cookies let GA4 recognize a repeat visit from the same browser. _ga holds a random ID for your browser, and _ga_PYP7VZLGET holds your current session and visit count on this site. Both last 13 months from your last visit and hold nothing else about you. Your answer in the cookie banner and the time you gave it sit in browser storage as mr_consent_v1, not in a cookie. That stays until you change it or clear site data, and you'll be asked again after 13 months.
In the EEA, the UK and Switzerland, nothing loads from Google until you press Accept in the banner. Google's tag doesn't load before then, and it never loads if you decline. In those countries I rely on your consent (Art. 6(1)(a) GDPR). The cookie rules ask for the same consent, under Art. 5(3) of the ePrivacy Directive and the national laws that implement it, and under the UK's PECR. I ask in Switzerland too.
Everywhere else, analytics is on when the page loads. I rely on a legitimate interest in knowing which channels work (Art. 6(1)(f)), and you can switch it off at any time. To decide whether to show the banner, the page asks Cloudflare which country your connection comes from, using the click counter's address above. That answer isn't stored. If the lookup fails, you get the banner.
If you decline, wherever you are, the page stops loading Google's tag, so nothing more goes to Google. If your browser sends Global Privacy Control or Do Not Track, the tag never loads at all.
Google LLC, and Google Ireland Limited where Google's terms name it, process this data for me as a processor under the Google Ads Data Processing Terms. Google signals and advertising features are switched off, so analytics data isn't linked to Google accounts or used for ads. GA4 deletes event data after 14 months.
Google may process the data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and Google's terms also include the European Commission's standard contractual clauses.
You can change your choice at any time with Cookie settings, here or at the foot of any page. If you withdraw consent, analytics stops and the _ga cookies are deleted from your browser. Data sent before that stays in GA4 until its 14 months run out. You can also block Google Analytics on every site with Google's opt-out add-on at tools.google.com/dlpage/gaoptout, or block cookies in your browser.
If you buy something
Payments are processed by Stripe. Stripe collects your email address, your card details and the country data it needs for tax, and it keeps the payment record. Your card details never reach this site or its operator, and the only thing that comes back here is whether the payment cleared. Stripe's own privacy policy governs that processing. The charge appears on your statement as AUTOM8 LLC, and the receipt Stripe emails you carries lipmichal@gmail.com as the support address on the account.
If you email me
Mail sent to the addresses on this site is stored in the operator's mailbox for as long as it is useful to answer you, and is not used for marketing.
Your rights
Under the GDPR you can ask for a copy of any personal data held about you, ask for it to be corrected or deleted, object to processing, or complain to the Polish supervisory authority, the Urzad Ochrony Danych Osobowych. Write to support@toolsthatrank.com and you will get an answer within 30 days.
Changes
If this policy changes, the date at the top changes with it. There is no mailing list to notify.