The Citeora project (citeora.eu) is operated by a private individual. For any question regarding privacy or data, contact us at info@citeora.eu.
What data we use and why
Necessary (no consent required): the session cookie citeora_session keeps access to paid audits and secures the site. During payment, the payment gateway Stripe processes the cookies it needs — without them a payment cannot be completed.
Analytics (with your consent only):Google Analytics 4 stores the cookies _ga and _ga_* to measure site usage. It only starts after you click "Accept" in the cookie banner.
Chatbot: the conversation transcript is stored for up to 30 days so the conversation can continue. The prompt and recent history are sent to the configured AI provider (OpenAI or Anthropic) to produce an answer. We do not store your raw IP address with the conversation; a pseudonymous rate-limit identifier is kept for up to 1 day.
Contact and feedback: if you voluntarily leave an email with an inquiry, we store the inquiry and email for up to 365 days so we can reply. Web feedback is kept for up to 180 days.
Audit tools: submitted URLs, generated results and errors are processed to run the requested audit. Completed SEO jobs are retained for about 60 minutes, accessibility jobs for about 30 minutes, and technical fetch caches for about 30 minutes. Audit URLs may also be sent to Google PageSpeed Insights.
Abuse prevention and free allowances: IP, browser-session and verified-email identifiers are converted to scoped HMAC identifiers before storage. General tool-use records are kept for up to 2 days; free-PRO submission mappings for 7 days; and the free-PRO allowance counter for as long as the free-PRO limit applies, so that it cannot be reset by waiting.
Payments: Stripe supplies the email address, checkout/payment identifiers, selected product and, for domain-scoped products, the domain. These records are retained while needed to activate access, handle refunds and meet accounting or dispute obligations; they are not included in automated deletion until an owner/accounting retention period is approved.
Technical logs and backups: server logs can contain an IP address, requested URL, browser identifier and error details. Logs are rotated by size, not by age: each stream keeps at most 2 MB plus 5 older files, so how many days they cover depends on traffic — we do not promise a fixed number of days. Verified database backups are kept for 30 days. Older backup archives are held separately, accessible only to the operator, until we delete them.
Service providers
Data is processed only as needed by the service involved: our hosting provider, Stripe for payments, Google Analytics after consent, OpenAI or Anthropic for AI-generated content, Google PageSpeed Insights for performance checks, and our email/SMTP provider for messages we send. Each provider applies its own terms and privacy policy.
Consent and withdrawal
Analytics cookies will not run until you consent to them. Consent is voluntary and you can withdraw it at any time — either using the button below (the cookie banner will show again), or by clearing cookies/data in your browser.
Your rights
Under GDPR you have the right to access your data, correct it, have it erased, restrict its processing, object to processing, and data portability. We handle requests at info@citeora.eu. If you believe we are processing data incorrectly, you may file a complaint with the Slovak Data Protection Authority.