What this policy covers
This covers the free scanner, the /llms.txt generator and every guide on this site, and the paid manual GEO audit. It says what is processed, why, how long it is kept, and what you can ask us to do about it. It does not cover third-party sites you reach by following a link from here.
Who is responsible
LLMention is an independent project, and it is the controller for the processing described below. Questions, requests and complaints all go to the same address: alex.xu@ccie13192.com. There is no tracking of individual visitors behind this site, so that address is also the fastest route to an answer.
What a scan processes
When you submit a domain or URL, the following is processed:
- The domain or URL you submitted, which is used to run the scan in that request.
- The requests the scanner makes to that domain — typically
robots.txt,llms.txt,sitemap.xmland the page HTML. These are ordinary GET requests for publicly available files, made from our servers, not from your browser. The site being scanned therefore sees our address, not yours. - Your IP address and user agent, as part of normal server operation, abuse prevention and rate limiting. These are recorded by our hosting provider, Cloudflare, and in our own logs.
No account, name or email address is required to run a scan, and we do not ask for one.
What is deliberately not done
- No account system, so there is no user profile to hold.
- No analytics, tracking pixels or session recording of our own. This site does not measure you.
- No history of the domains you scan. The score is computed per request and is not stored as a database of who scanned what. The one exception is the aggregate, anonymised research published on the study page, which covers a fixed list of public homepages and no visitor data.
- No selling, renting or sharing of personal data for anyone else's marketing.
Cookies
Running a scan requires no cookie and we set none of our own for it. Cloudflare may set strictly necessary security cookies as part of serving the site and protecting it from abuse; these are not used to build a profile of you. Advertising cookies are a separate matter and are described in the next section.
Advertising and third-party cookies
This site is free to use, and advertising is what pays for it. When an ad is served on a page you are reading:
- Google, as a third-party vendor, uses cookies to serve ads on this site.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- You can opt out of personalised advertising by visiting Google Ads Settings, and opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info or, in Europe, youronlinechoices.eu.
- Google's own handling of this data is described in the Google Privacy & Terms.
If you are in the EEA, the UK or Switzerland, no non-essential cookie is set and no personalised advertising is served before you consent. Consent is requested through a Google-certified consent management platform, and the choice you make there is honoured for the purposes it covers. You can withdraw consent at any time by writing to alex.xu@ccie13192.com; withdrawing it does not affect the lawfulness of anything done before then.
Other third parties
- Cloudflare hosts and delivers this site and provides its security layer, and therefore processes request data including IP addresses on our behalf.
- Google serves the advertising described above.
- GitHub hosts the public source repository. If you open an issue there, GitHub's own terms and privacy policy apply to that.
If you pay for a manual audit, the payment provider used for that transaction processes your payment details under its own privacy policy. We do not receive or store your card details.
Why this processing is allowed
- Legitimate interests (Article 6(1)(f) GDPR) for serving the pages, running the scan you asked for, keeping the service available, and preventing abuse and denial-of-service.
- Consent (Article 6(1)(a) GDPR) for advertising cookies and personalised advertising where consent is required.
- Performance of a contract (Article 6(1)(b) GDPR) for correspondence and delivery when you order a manual audit, and for the record-keeping that goes with it.
How long it is kept
Server and security logs are kept for a short period, determined by our hosting provider's log retention, and are used for security and capacity rather than analysis of individuals. Scan results are not stored beyond the request that produced them. Correspondence about a paid audit is kept for as long as needed to deliver it and to meet accounting obligations. Advertising cookie lifetimes are set by Google, not by us.
Your rights
Where the GDPR or a comparable law applies to you, you have the right to ask for access to your personal data, to have it corrected, deleted or restricted, to object to processing based on legitimate interests, to receive it in a portable form, and to withdraw consent at any time. Write to alex.xu@ccie13192.com and say which right you are exercising; no form is needed. You also have the right to complain to your national data protection authority. If a request concerns data held by Google for advertising, its own privacy controls are the faster route, and the opt-outs linked above work immediately.
Transfers outside your country
Cloudflare and Google operate globally, so data may be processed outside the country you are in, including in the United States. Those transfers rely on the safeguards those providers have in place, such as the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.
Chinese data protection law (PIPL)
The operator of this site is established in China, so the Personal Information Protection Law (个人信息保护法, PIPL) applies to this processing in addition to the GDPR where that applies. Under PIPL, the information described above is processed for the same purposes and kept for the same periods, on the basis of your consent and the necessity of processing to provide a service you requested.
Where PIPL applies, you have the right to be informed about and to decide on the processing of your personal information, to access and copy it, to have it corrected or completed, to have it deleted, to withdraw consent, to ask for an explanation of the processing rules, and to complain to a Chinese data protection authority. Requests go to the same address as the GDPR requests above, and cross-border transfers rely on the safeguards described in the previous section.
Children
This site is a tool for people who run websites. It is not directed at children, and we do not knowingly process data about them.
If this policy changes
The date at the top of this page changes whenever the policy does. If a change concerns how advertising or cookies work, it will be reflected here before it takes effect, and consent will be asked again where the law requires it.
Contact
Email alex.xu@ccie13192.com, or use the contact page for anything that is not a data request. The terms of service and the refund policy are the pages that go with this one.