← Back to the leaderboard

Clear, human-readable terms

Privacy Policy

What we collect, why we use it, and how you can revoke access or remove your data.

Effective 23 August 2026

1. Who operates outseo.lol

outseo.lol is operated by Tetriz s.r.o. ("Tetriz", "we", "us", or "our"). Tetriz is the controller of the personal data described in this policy. Questions and privacy requests can be sent to hi@outseo.lol.

2. What the service does

outseo.lol is a public leaderboard of websites ranked by aggregate organic clicks from Google Search Console. There are no outseo.lol user accounts. A website owner connects Google Search Console, reviews the verified properties available to them, and chooses which properties to publish.

3. Data we process

Google authorization data

We store encrypted Google OAuth access and refresh tokens, their expiry time, and a random connection identifier. These credentials let the service refresh published metrics. We never receive or store your Google password and do not request your Google profile, email, contacts, or advertising data.

Search Console data

We retrieve the URLs and permission levels of properties verified in your Search Console account. For properties you explicitly choose, we retrieve aggregate clicks, impressions, click-through rate, and average position for the latest stable 28-day reporting window. We do not request query-level, page-level, device, country, or user identity dimensions.

Published website information

For a selected property, we store and publicly display its domain, public description, favicon, reporting period, and aggregate organic click count. The description is taken from public website metadata. Metrics not displayed on the leaderboard are used only to maintain and validate the service.

Visits and essential cookies

We use short-lived, secure cookies to protect the OAuth flow and remember a connection while you select properties. We also set a first-party outseo_visitor cookie containing a random identifier for up to one year. Only a keyed one-way hash of that identifier is stored, so we can count unique visitors without storing the identifier in the database. We also use Plausible for aggregate website analytics. Our hosting and security providers may process ordinary request data such as IP address, user agent, timestamps, and requested URLs.

4. Why we process data

  • To authenticate a read-only Search Console connection with your consent.
  • To show verified properties and let you choose what to publish.
  • To calculate, rank, and refresh aggregate organic click totals.
  • To protect the OAuth flow, prevent abuse, and keep the service reliable.
  • To understand aggregate usage and improve outseo.lol.

Where applicable, our legal bases are your consent, performance of the service you request, and our legitimate interests in operating, securing, and improving the service. You may withdraw consent at any time as described below.

5. What becomes public

Only properties you select are published. The public leaderboard shows the website domain, public site description and favicon, reporting period, and aggregate click count. We do not publish Google account identities, OAuth credentials, Search Console queries, individual pages, or unselected properties.

6. Service providers and transfers

We use service providers only as needed to operate outseo.lol:

  • Google OAuth and Google Search Console API for authorization and metrics.
  • Vercel for application hosting, delivery, and operational logs.
  • Supabase for the hosted database.
  • Plausible for aggregate website analytics.
  • Google's favicon service to display public website icons.

These providers may process data in countries outside your own. Where required, we rely on appropriate safeguards for international transfers and the providers' applicable data-protection terms.

7. Google API data

outseo.lol's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide and improve the user-facing leaderboard functionality described here. We do not sell Google user data, use it for advertising, or allow humans to read it except when necessary for security, legal compliance, or support with your explicit permission.

8. Security and retention

OAuth tokens are encrypted before storage and are available only to server-side service code. We use access controls, secure cookies, and standard transport encryption. No online service can promise absolute security.

OAuth state cookies expire after approximately ten minutes, connection cookies after approximately one hour, and the anonymous visitor cookie after up to one year. We keep OAuth credentials and published metrics while they are needed to maintain a selected listing, until access is revoked, or until a valid deletion request is completed. We may retain limited records longer where required for security, dispute resolution, or law.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data, to object to certain processing, and to lodge a complaint with a data-protection authority. Contact us at hi@outseo.lol to exercise these rights.

11. Children

outseo.lol is intended for website owners and professionals and is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes and contact

We may update this policy as the service or legal requirements change. Material updates will be posted here with a new effective date. Contact Tetriz s.r.o. at hi@outseo.lol with questions or requests.