Privacy

Last updated 19 October 2026.

IndexDoctor checks public pages and, if you connect Google, reads your Search Console data so we can show you why a URL is not indexed. This policy describes that data. The operator of this IndexDoctor site is responsible for the account data.

Free checks

When you paste a URL we fetch that URL, its robots.txt, and sitemaps it declares. We store the report so you can share the result page. We use product analytics (PostHog) to count checks. We store the host and the verdict, not the full URL or your email address.

If you enter an email, we email the report to that address. That send does not add you to the mailing list. If you also tick the mailing-list box, we store your email, the URL, and the consent time, keep one active weekly check for that address, and add you to the IndexDoctor Sign-ups list. A later signup replaces the earlier URL. If the box is unticked, we do not add that contact to the list.

Accounts and Google

Sign-in uses Google. We receive your Google account id, email, name, and profile image. We also request this scope and no broader Google scope:

openid email profile https://www.googleapis.com/auth/webmasters.readonly

That scope is Search Console read-only. We use it to list properties you pick, read sitemaps, read search analytics, and call the URL Inspection API. We cannot change the site, submit a sitemap, or request indexing.

Google API Limited Use

IndexDoctor's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Search Console data is used only to provide the indexing and crawler report you asked for, inside your account.
• We do not sell Google user data, and we do not use it for advertising, credit, or to train a generalized model.
• We do not allow humans to read it except when you ask for support, for security, to comply with law, or when the data is aggregated and not tied to a person.
• Google tokens are encrypted at rest so the weekly check can keep working. You can disconnect by deleting the account.

Billing

Paid plans are billed by Stripe. Stripe receives your email and payment details. We store the Stripe customer id, subscription id, plan, status, and renewal time. We do not store card numbers. A dispute, refund, or early fraud warning is recorded as a flag on the subscription.

Email and ActiveCampaign

We email the report and the account messages you ask for. The mailing list is ActiveCampaign. We add you only after you tick the consent box. Unsubscribe, or turn consent off in settings, and we remove you from the list. Cancelling a paid plan does not remove you from the list if you still want those emails.

Cookies

A signed cookie keeps you signed in. A short-lived cookie holds the Google sign-in step. We use product analytics (PostHog) to count checks, and we do not record what you type into forms.

Retention and deletion

Delete the account from settings to remove the account, Google tokens, sites, and inspections. A shared check report can stay available at its link. Unsubscribe stops the weekly check and the mailing list even if you have no account.

Contact

Use the support email shown on the Google sign-in screen.