Legal

Privacy Policy

On this page

Last updated: October 25, 2026 Effective date: October 25, 2026

This Privacy Policy explains how Rabbit Rank LLC (“Rabbit Rank,” “we,” “us” or “our”) collects, uses, shares and protects personal data when you visit rabbitrank.com (the “website”), contact us, or use our services, including the Rabbit Rank app at app.rabbitrank.com (the “app”), where you sign up, order and pay. We are the controller of this personal data. Please read this policy with our Cookie Policy, which lists the cookies the website uses.

Key terms

Personal data: any information about an identified or identifiable person. For California residents, it includes “personal information” as defined in the California Consumer Privacy Act (CCPA).
Processing: anything we do with personal data, such as collecting, storing, using or deleting it.
Data subject: the person the personal data is about.
Child: a person under 16 years of age.

Personal data we collect

Information you give us

Contact form: your name, email address, website, the topic you choose and your message.
Chat and email: what you write to us in the chat on the website or by email, and any name or email address you give us there.
Your account and orders, in the app: your account details (such as your name, email address and company), the plans and placements you order, your briefs (target URLs and anchor text) and your billing details. Payments are processed by third-party payment processors.
Agency orders: if you order on behalf of your clients, the client websites, target URLs and anchor text you give us.

Information collected automatically

Usage data (Google Analytics): the pages you view, how you reached the website (for example, from a search engine or another site), your device and browser, and your approximate location based on your IP address. Collected only if you click Accept in our cookie banner.
Chat data (Rabbitblaze): if you click Accept in our cookie banner, the chat loads, and Rabbitblaze gives your browser an anonymous visitor ID and records details such as your device, browser, approximate location and the page you’re on.
Server logs: our web server records each request, including your IP address, browser, the page requested and the time, to run and secure the website.
Spam protection: when you send the contact form, we keep a coded (hashed) version of your IP address for one hour, to limit repeated messages.
Cloudflare’s “Are you human?” check: on the contact page, Cloudflare Turnstile looks at your IP address and details about your browser and device to tell people from bots before the form is sent. Cloudflare uses this only to detect and block bots and to improve that detection, not to identify, profile or target you. See Cloudflare’s Turnstile Privacy Addendum.
Affiliate link clicks: a few blog posts include tracked affiliate links (addresses starting with /go/). When you click one, we record the click, including the time, your IP address, your browser and the page you came from, to count clicks.

Information from other sources

Social networks: if you interact with our profiles on X, LinkedIn, Facebook, Instagram or YouTube, we see what those networks show us, such as your public profile name.
Website data: to deliver our services, we look up public data about websites, such as Moz and Ahrefs metrics. This data is about websites rather than people.

How we use personal data

To answer you: reply to your messages through the contact form, the chat or email.
To provide our services: run your account, take orders and payments, place links, send reports, and keep our refund and replacement promises.
To keep you informed: send service messages, such as order updates and reports.
Marketing: send you marketing emails, only with your consent where the law requires it. You can unsubscribe anytime.
To improve the website: understand how people use it, with Google Analytics.
Security: protect the website, the app and our services, and prevent fraud, spam and misuse.
Legal compliance: meet our legal, tax and accounting obligations, and enforce our Terms of Use.

Legal bases for processing

If you’re in the European Economic Area (EEA), the UK or Switzerland, we rely on these legal bases:

Contract: to provide the services you order and to answer your questions before you order.
Legitimate interests: to run, secure and improve the website and our services, prevent fraud and keep business records.
Consent: for Google Analytics and the chat (Rabbitblaze) on the website, which load only after you click Accept in our cookie banner, and for marketing emails where the law requires it. You can withdraw your consent at any time; for cookies, use “Cookie settings” at the bottom of every page.
Legal obligation: to meet tax, accounting and other legal requirements.

We don’t sell your personal data. We share it only with:

Service providers that work for us: our web hosting provider, Cloudflare (which delivers and protects the website, including the “Are you human?” check on the contact form), Google (Google Analytics), Rabbitblaze (the website chat), our email providers and the payment processors used in the app. They may use personal data only to provide their services to us.
Publishers: to place a link, we share your target URL and anchor text, and for guest posts the article, with the publisher of the site.
Legal authorities: when the law requires it, or to protect our rights, our customers or others.
A new owner: if we’re involved in a merger, acquisition or sale of assets, personal data may pass to the new owner under this policy.

Cookies and similar technologies

The website uses a small number of cookies and similar technologies. Our Cookie Policy lists each one, with what it does and how long it lasts:

Your cookie choice: one strictly necessary cookie that remembers whether you clicked Accept or Decline in our cookie banner.
Cloudflare’s “Are you human?” check on the contact page, which keeps one item in your browser’s storage under Cloudflare’s own address. It’s strictly necessary to protect the form, so it loads without asking.
Google Analytics cookies, to count visits and see how the website is used, only after you click Accept. You can opt out on every website with Google’s opt-out browser add-on.
Rabbitblaze cookies and browser storage, so the chat works and can keep your conversations together, only after you click Accept.
Click-counting cookies, set only when you click a tracked affiliate link in a blog post.

The website doesn’t use advertising, retargeting or social media tracking cookies or pixels. Our fonts are hosted on our own server, so loading them doesn’t send your data to a font service. You can change your cookie choice at any time with “Cookie settings” at the bottom of every page, and block or delete cookies in your browser settings.

Content from other websites

Some blog posts show content from other websites, such as YouTube videos, posts from X, and images or scripts hosted elsewhere. When you view those posts, your browser connects to those websites, which receive your IP address and may set their own cookies. The same applies when you follow a link to our social media profiles or to another website. Their own privacy policies apply.

How long we keep personal data

We keep personal data only as long as we need it for the purposes in this policy:

Messages (contact form, chat and email): as long as we need them to deal with your enquiry and keep a record of our conversation.
Account and order records: while your account is open, then as long as we need them for tax, accounting and legal reasons.
Analytics data: for the retention period set in our Google Analytics account.
Server logs and spam protection: for a short time. The contact form’s coded IP address is deleted after one hour.

When we no longer need personal data, we delete it or make it anonymous.

Data security

We protect personal data with HTTPS encryption, access controls and other safeguards suited to the risk. No system is completely secure. If you think your data with us is at risk, email [email protected] straight away.

International data transfers

Rabbit Rank is based in the United States, and our service providers, including Google, Rabbitblaze and Cloudflare, may process personal data in the United States and other countries. When we transfer personal data from the EEA, the UK or Switzerland, we use safeguards the law recognizes, such as the EU Standard Contractual Clauses.

Your rights as a data subject

Depending on where you live, including in the EEA, the UK and Switzerland, you have the right to:

Access: ask how we process your personal data and get a copy of it.
Rectification: have inaccurate or incomplete data corrected.
Erasure: have your data deleted in certain cases, for example when we no longer need it.
Restriction: limit how we use your data.
Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
Data portability: receive your data in a common, machine-readable format.
Withdraw consent: where we rely on your consent, withdraw it at any time.
Complain: lodge a complaint with your local data protection authority.

To use these rights, email [email protected]. We reply by email within one business day, and we complete requests within the time the law allows, usually one month.

Your California privacy rights

If you live in California, the CCPA gives you additional rights. In the past 12 months, we have collected these categories of personal information, from the sources and for the purposes described above:

Identifiers: name, email address, IP address, account name and online identifiers such as cookie IDs.
Commercial information: the plans and placements you order or ask us about.
Internet activity: the pages you view and how you interact with the website and the chat.
Geolocation data: your approximate location, based on your IP address.
Professional information: your company and job title, if you share them.

We disclose these categories only to the recipients listed in “How we share personal data,” for business purposes. We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We don’t knowingly sell or share the personal information of anyone under 16.

California residents may:

Know and access: ask what personal information we hold about you and how we use it, and get a copy.
Delete: ask us to delete your personal information.
Correct: ask us to correct inaccurate personal information.
Opt out of sale or sharing: we don’t sell or share personal information, but you can still send us an opt-out request.
Non-discrimination: use these rights without being treated differently or denied service.

To make a request, email [email protected] or use our contact form.

Verification: before we act on a request, we may ask you to confirm your identity, for example by replying from the email address we hold for you or by logging in to your account. An authorized agent must give us your written permission to act for you.

Nevada residents

Nevada law lets residents opt out of the sale of certain personal information. We don’t sell personal information, but you can still send an opt-out request to [email protected].

Children’s privacy

Our website and services are for businesses and aren’t directed to children under 16. We don’t knowingly collect personal data from children. If you believe a child has given us personal data, email [email protected] and we’ll delete it.

Do Not Track and Global Privacy Control

There’s no common standard for browser Do Not Track signals, so the website doesn’t respond to them. Because we don’t sell personal information or share it for targeted advertising, Global Privacy Control signals don’t change how the website works.

Changes to this policy

We may update this policy. We’ll post the new version on this page with a new “Last updated” date. If we make a material change, such as using your data in a new way, we’ll also tell you directly, for example by email.

Disputes

This policy is governed by the laws of the State of Texas. Any dispute about it is handled as set out in our Terms of Use. This doesn’t affect your right to complain to a data protection authority.

Contact us

For questions, requests or complaints about your personal data, email [email protected]. We reply by email within one business day.

Rabbit Rank LLC
#701 Tillery Street Unit 12-2508
Austin, Texas 78702
United States