Privacy Policy

Hosting & Security (All-Inkl / Cloudflare)

Our website is hosted on servers operated by ALL-INKL.COM – Neue Medien Münnich (Germany). To enhance security and performance, we also use the services of Cloudflare.

When you access our website, Cloudflare processes your IP address, technical browser data and server log information to deliver the website, defend against attacks and optimize performance.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in secure and efficient website delivery).

Recipients: ALL-INKL.COM, Germany; Cloudflare, Inc., USA. Data transfer to Cloudflare is based on the EU Standard Contractual Clauses.

Language Selection (Language Cookie)

Our website uses a cookie to store your preferred language setting. This ensures that you do not have to select your preferred language again on future visits.

This cookie is technically necessary to display the website correctly in your chosen language.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in a user-friendly presentation of our content).

Note: The cookie is automatically deleted when you clear your browser data or when it expires. No data is shared with third parties.

Web Analytics (Matomo)

We use Matomo hosted on our own server at Hetzner (Germany). Your IP address is neither transmitted nor stored. No data is shared with third parties and no cross-site tracking takes place.

The collected data is used solely for measuring website reach and improving our content.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in improving our website).

Recipient: Hetzner Online GmbH.

Newsletter (Sendy / AWS)

We use the self-hosted system Sendy to send our newsletter. In this context, we process your email address as well as delivery and open-rate data. The data is stored on servers operated by Amazon Web Services (AWS).

Subscription follows a double opt-in process: after signing up, you will receive a confirmation email to verify your subscription. Your email address will only be added to our mailing list after confirmation.

You may withdraw your consent at any time by clicking the unsubscribe link in any newsletter. Once unsubscribed, your email address will be removed from the mailing list.

Legal basis: Article 6(1)(a) GDPR (consent to receive the newsletter).

Recipient: Amazon Web Services, Inc., USA. Data transfer is based on the EU Standard Contractual Clauses.

Contact Form (Notion / Slack)

Data submitted through our contact form is first processed on our own server and then transferred to our internal organization tools Notion and Slack for further processing. No IP addresses are transmitted.

Legal basis: Article 6(1)(b) GDPR (responding to your inquiry) and Article 6(1)(f) GDPR (internal organization).

Recipients: Notion Labs, Inc., USA; Slack Technologies, LLC, USA.
Data transfers are based on the EU Standard Contractual Clauses.

Wingmen SEO Bookmarklet

Our "SEO Bookmarklet" is a client-side application for rapid on-page analysis directly within your browser. The protection of your data is central to its design architecture:

Local Execution: The script runs exclusively locally within your browser context. All analyses (e.g., reading meta tags, word counting or link auditing) are performed in real-time in your device's memory (client-side). No data is persistently stored or uploaded to our servers.
No Data Transmission: The Bookmarklet does not transmit any personal data, page content or analysis results to Wingmen servers or third parties (no tracking, no analytics).
Interaction with Third Parties: The tool provides shortcuts to external analysis services (e.g., Google Search Console, PageSpeed Insights, Sistrix). Only if you actively click these buttons is the URL of the current page passed to the respective service to perform the specific check. This occurs solely through a standard action of opening a new browser tab.

RoboX (Chrome & Firefox Extension)

Our Browser Extension "RoboX" is a client-side SEO analysis tool. The protection of your data is central to its design architecture:

Local Processing: All analyses (e.g., HTTP status & redirect checks, robots.txt parsing, meta tag/canonical evaluation, sitemap validation, link extraction, and search engine/AI crawler rendering simulation) are performed exclusively locally in your browser.
Local Storage & Caching: To improve performance, enable monitoring features, and save your preferences (e.g., language selection, background check settings, UI preferences, custom User-Agents), the extension caches data locally in your browser using the Chrome Storage API. For features like "Technical SEO Change-Monitoring" and the "Robots.txt Archive", explicitly saved SEO snapshots (baselines) are stored persistently on your local device. Volatile data, such as HTTP headers and redirect chains, is held in the temporary session storage strictly for the active tab and is cleared automatically. This data never leaves your device.
No Data Transmission: The extension does not transmit any personal data, browser history, or analyzed content to Wingmen servers or third parties (no tracking, no analytics).
Technical Requests & Simulation: To function, the extension must perform HTTP requests to the URLs involved in your current page load (this includes the website you are actively visiting, its redirect hops, and target URLs of canonical tags) to fetch necessary technical files like the /robots.txt or Sitemap XML. For the custom bot simulation features ("Simulate Bot" / "Render as..."), the extension temporarily and locally modifies your browser's User-Agent and blocks specific resource requests to simulate the selected crawler's behavior. These requests originate directly from your IP address to the respective target servers and are technically necessary to retrieve the required SEO data.
Permissions: The extension requests permissions to access website data solely to read the technical SEO directives (HTTP Status Codes, Redirect Chains, Meta Robots, Link Canonicals, and X-Robots-Tags) as well as on-page links and web performance resources of the page ecosystem you are actively analyzing, and to temporarily modify network requests for the rendering simulation.

SerpX - On-SERP Analysis Tool (Chrome & Firefox Extension)

Our browser extension "SerpX" is a client-side tool for analyzing search results. It works without a user account, without tracking and without a server on our side – your project data never reaches Wingmen. What is shared with third parties is determined by the features you choose to use; the one exception is stated explicitly under "Favicons".

Local Processing & Storage: All search results you extract from the supported search engines (Google, Bing, Brave, Ecosia, DuckDuckGo, Qwant), uploaded CSV data, as well as the notes, reviews, and projects you create, are processed and stored exclusively locally within your browser's internal storage. The same applies to the page texts fetched in the background and to the API keys you provide. No project data is sent to Wingmen servers.
Favicons (Google): To make the results table easier to read, SerpX displays the favicon of every domain found and loads it via the google.com/s2/favicons service. This tells Google which domains appear in your table – even if you use no other feature. What is transmitted is the domain name, not the full URL and not your search term; as with any request for an external resource, Google also receives your IP address and any Google cookies set in your browser. You can switch this display off under Settings → General; no request then leaves your browser for it.
API Usage (Optional): The extension only transmits data (such as URLs or keywords) to third parties if you actively use external analysis features and provide your own API keys. This covers Sistrix, Ahrefs, DataForSEO, Google PageSpeed Insights and the Google Chrome UX Report. These requests are made directly from your browser to the respective providers' API endpoints, and their privacy policies apply. For Sistrix and PageSpeed Insights the interface requires the key to be part of the address – it may therefore appear in the provider's server logs.
AI Features (Optional): The "Entity Gap" and "AI Briefing" features send content to an AI provider of your choice (Anthropic, OpenAI or Google Gemini) – again using your own API key and directly from your browser. Unlike the other interfaces, this sends not just URLs but the main content of the analyzed pages, and depending on your settings also your notes, your free-text briefing and any files you attach. SerpX shows you the size beforehand and lets you inspect the full prompt; nothing is sent until you click the button. Please check whether the content is suitable for transmission to that provider – particularly if it contains personal data.
Technical Interactions & Crawling: To enable on-page analysis, the extension fetches target URLs in the background via the "Crawl" function to analyze HTML structures (e.g., headings, word counts or readability). When you open a result, it also resolves redirects to determine the actual target URL. Additionally, URLs can be opened in new browser tabs with a note-taking overlay for detailed audits. All these requests are made directly from your IP address to the target servers, without routing through our systems.
Permissions: The extension requests access rights to website data (<all_urls>) to extract SERP data from the supported search engines, inject the analysis overlay, parse HTML code in the background, and enable communication with your configured APIs. The extraction script is injected only when you click the SerpX icon, not permanently on every page you visit. The "tabs" and "activeTab" permissions are used to start the extension on the open search results page and to open results in new tabs; "storage" and "unlimitedStorage" keep your projects locally; "offscreen" (Chrome only) parses fetched HTML in the background. SerpX does not read your browsing history or any stored credentials.