What we collect, why we collect it, and what we won't do. We treat customer data the way we'd want ours treated: respectfully, minimally, and with locked doors.
MonkeyIndexer OÜ ("we", "us", "our") operates monkeyindexer.com and the related API service. This policy explains what personal data we collect, how we use it, and the rights you have over it.
When you sign up, we collect your name, email, hashed password, and — if you choose to provide it — company name and billing address.
URLs you submit for indexing are stored for service operation: queue management, status tracking, SLA monitoring, and your own dashboard history. We do not use submitted URLs for any advertising or third-party analytics.
Standard server logs (IP address, user agent, request timestamps) are retained for 30 days for security and abuse-prevention purposes, then automatically purged.
We do not store your card number, CVV, or full bank details on our servers. Payments are processed by Stripe and PayPal under their own PCI-compliant infrastructure. We only retain transaction IDs and a redacted last-4 reference for receipts.
We use your data only to:
That's the whole list. We don't sell your data. We don't share it with advertisers. We don't profile you.
We'll only send marketing emails (product updates, occasional newsletters) if you explicitly opt in. You can unsubscribe with one click at any time, and we'll process the request within 24 hours.
We use a small set of strictly necessary cookies for authentication and CSRF protection. We use one analytics cookie (self-hosted Plausible) that respects Do-Not-Track and contains no personal identifiers. We do not use third-party advertising, retargeting, or social-media tracking cookies.
We share data only with carefully selected service providers needed to run MonkeyIndexer:
Each is bound by a Data Processing Agreement and is GDPR-compliant. We never sell your data, share it with advertisers, or hand it to data brokers.
Account data is retained for as long as your account is active. After deletion, we keep anonymised transaction records for the legally-required period (typically 7 years for tax purposes). Submission history is retained for 12 months by default, or until you ask us to wipe it.
Under GDPR, CCPA, and similar laws, you have the right to:
To exercise any of these, email privacy@monkeyindexer.com. We'll respond within 30 days, usually within 48 hours.
We take security seriously:
No system is perfectly secure. If a breach affects your data, we'll notify you within 72 hours of discovery.
Our default infrastructure is in the EU. If your data is transferred outside the EEA (e.g. for support tools), we rely on Standard Contractual Clauses to ensure your data receives equivalent protection.
MonkeyIndexer is not directed at children under 16, and we do not knowingly collect data from them. If you believe we have, please contact us and we'll delete it promptly.
We may update this policy from time to time. Material changes will be communicated by email at least 14 days before they take effect. The "last updated" date at the top reflects the most recent revision.
The optional MonkeyIndexer Chrome extension is governed by this same policy plus the following specifics required by Chrome Web Store program policies:
chrome.storage.local. It is not synced to other devices, transmitted to any third party, or visible to web pages you visit.https://monkeyindexer.com/api/v1/submit with your API key as a Bearer token. Nothing else is transmitted.http(s):// page; you can mute it per-domain via the gear menu (preferences stored locally). It is mounted inside a closed Shadow DOM so the host page cannot inspect or tamper with it.storage (save your key + mute list locally), activeTab (read current tab URL when you click the toolbar icon), host_permissions: https://monkeyindexer.com/* (call your account's API).chrome://extensions deletes the local storage including your API key. Revoking the key in your dashboard at /dashboard/api-tokens takes effect immediately for any subsequent requests, even if the key is still pasted into an installed copy elsewhere.Data Protection Officer: privacy@monkeyindexer.com. Postal: MonkeyIndexer OÜ, Attn: DPO, Maakri 19/1, 10145 Tallinn, Estonia. EU citizens may also lodge complaints with their local supervisory authority.