Privacy policy

Last updated: November 8, 2026

This policy explains what personal data CitedBy collects, why, and what you can do about it. It's short because we collect very little.

Who we are

CitedBy is an independent project that publishes guides on AI search visibility for local businesses. For any privacy question or request, write to citedbyhq@proton.me.

What we collect

• Your email address, when you subscribe to our emails on this site.
• A one-way hash of your IP address, kept for up to 24 hours only to stop spam and abuse of the signup form. We can't turn it back into your IP address.
• Order details, if you buy a product or an audit: your email, what you bought, the amount and the delivery date. Card details are handled entirely by the payment provider. We never see or store them.
• Anonymous visit statistics from Cloudflare Web Analytics, which doesn't use cookies or track you across sites.

We don't use advertising cookies, and we don't sell, rent or share your data with advertisers.

Why we use it

• To send you the emails you signed up for (legal basis: your consent).
• To deliver what you buy and keep proof of delivery (legal basis: performance of a contract).
• To keep the signup form free of spam (legal basis: legitimate interest).

Who processes it for us

• Website hosting and the subscriber database: Cloudflare (Pages and D1)
• Email: Proton Mail
• Payments: TropiPay for cards, or a cryptocurrency transfer if you choose to pay that way

These providers only use your data to provide their service to us. Data is encrypted in transit (HTTPS) and at rest by these providers.

How long we keep it

We keep your email while you're subscribed. When you unsubscribe, we stop emailing you and delete your address within 30 days. Order records are kept as long as needed for refunds, disputes and tax purposes.

Your rights

You can unsubscribe at any time by replying "unsubscribe" to any of our emails. You can also ask us to access, correct, export or delete your data by writing to citedbyhq@proton.me. We reply within 30 days. If you're in the EU, UK, Canada or California, you also have the right to complain to your local data protection authority.

Security

This site is served only over HTTPS with strict security headers, and access to subscriber data is limited to the people who run CitedBy.

Changes

If we change this policy in a meaningful way, we'll update the date above and tell subscribers by email.