Privacy Policy

1. Data We Collect

When you create an account we collect your full name, email address, and a password. Your password is hashed with bcrypt before storage — we never store or have access to the plain-text value. If you use our contact form, we also collect the name, email, subject, and message you provide.

2. Analysis Data

When you run an SEO analysis we store the URL you submitted and the resulting scores and issue reports. If you are signed in, this data is linked to your account so you can access your analysis history. Guest analyses are not stored after the session ends.

3. How We Use Your Data

• Provide and improve the Hugo SEO analysis service.
• Send transactional emails — account verification and password-reset messages sent from [email protected].
• Respond to contact-form submissions, forwarded to [email protected].

4. Data Storage

Account data and analysis results are stored in a PostgreSQL database. Authentication tokens (JWT) are stored in your browser's localStorage — no authentication cookies are set. Passwords are hashed with bcrypt and are irreversible.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. The only external service that receives data from your use of Hugo is the Google PageSpeed Insights API — when you run an analysis, the URL you submit is sent to Google solely to retrieve Lighthouse performance metrics. This is governed by Google's Privacy Policy.

6. Advertising

Hugo uses Google AdSense to display advertisements that help keep the service free. Hugo implements Google Consent Mode v2 in Advanced mode: the AdSense script loads on every page visit, but all consent signals default to denied until you actively make a choice in the privacy banner.

With Advertising consent (opt-in)

• Google may set advertising cookies (_ga, _gid, _gads) on your device.
• Google may serve personalised ads based on your browsing history and inferred interests.
• Google may process your IP address and device identifiers for ad measurement and fraud prevention.

Without Advertising consent (default / opt-out)

• Google serves contextual non-personalised ads only.
• No advertising cookies are placed on your device.
• Google may still send cookieless pings for aggregate conversion modelling (permitted under GDPR Recital 49 / legitimate interest for network security and fraud prevention).

Google's use of your data is governed by the Google Privacy Policy. You can review or change your advertising consent at any time via the privacy preferences panel, or manage Google's ad settings directly at adssettings.google.com.

7. Your Rights

Depending on where you live, you have the following rights regarding your personal data:

EU / EEA residents (GDPR / DSGVO)

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your account and all associated data.
• Restriction — ask us to pause processing your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — update your storage preferences at any time via the consent panel (see Cookie Policy).
• Lodge a complaint — you have the right to complain to your local data protection authority (Datenschutzbehörde / CNIL / ICO etc.).

California residents (CCPA / CPRA)

• Know — request disclosure of the categories and specific pieces of personal information we have collected.
• Delete — request deletion of your personal information subject to certain exceptions.
• Correct — request correction of inaccurate personal information.
• Opt-out of sale / sharing — Hugo does not sell or share personal information for cross-context behavioural advertising. No opt-out is required.
• Non-discrimination — exercising your rights will not result in denial of service.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also manage your account data directly through your profile settings.

8. Data Controller

The data controller responsible for processing your personal data is Hugo Digital Services. For any data-related enquiries, reach us at [email protected].