# RankFlow AI Privacy Policy **Effective date: August 26, 2026** **Applies to: RankFlow AI browser extension version 1.1.0** RankFlow AI is designed around local, user-triggered page analysis and limited anonymous product analytics. This policy explains what the extension processes, what it stores, and what it sends to a third party. ## Page Analysis RankFlow AI analyzes a page only when the user explicitly clicks **Scan current page** or **Scan again**. The extension uses `activeTab` and `scripting` to temporarily access the active page and read supported SEO signals: - Page title and meta description - Canonical and robots metadata - H1, H2, and H3 information - Image alt-attribute status - Internal and external link counts - JSON-LD presence and count - Open Graph field presence The resulting scan data, score, recommendations, SERP preview, passed checks, and Page Facts are processed locally in the browser's extension context. They are not uploaded. Full scan results and page content are not stored as browsing history. RankFlow AI does not read cookies, form values, passwords, LocalStorage, SessionStorage, authentication state, user identity, full page HTML, or unrelated page body content. ## Show on Page When the user clicks **Show on page** for a supported recommendation, RankFlow AI re-locates the relevant Missing Alt images or multiple H1 elements in the current DOM and adds a temporary visual marker. The marker is removed automatically after four seconds. RankFlow AI does not upload or store the target descriptor, matched count, selector, DOM node, page content, URL, or domain. It does not use a static content script, background service worker, or MutationObserver. ## Fix & Rescan Session Baseline To compare a successful rescan with the previous successful scan of the same tab and normalized URL, RankFlow AI stores a short-lived baseline in `chrome.storage.session`: - Tab ID - Normalized URL - Previous total SEO score - Scan timestamp This baseline is local to the browser session, is isolated by tab and URL, and is replaced by the next successful scan. It is not uploaded, is not copied to persistent `storage.local`, and is not used to create scan history, browsing history, trends, or profiles. It does not contain page content, full scan results, recommendations, Page Facts, or report text. ## Copy SEO Report When the user clicks **Copy SEO Report**, RankFlow AI formats the latest successful in-memory result as localized plain text and writes it to the clipboard through the user's Popup interaction. The report is not uploaded, stored, or sent to Analytics. RankFlow AI does not request the `clipboardWrite` permission. ## Anonymous Product Analytics RankFlow AI uses Mixpanel to understand whether core extension interactions work and are useful. Analytics is limited to: - A randomly generated anonymous distinct ID - Existing extension interaction events - Selected Locale - Extension Version - Score Band, not the exact SEO score - Recommendation counts - Stable internal recommendation Rule ID and Priority RankFlow AI does not send Mixpanel: - Page URL, normalized URL, domain, or hostname - Page title or meta description - Heading text or canonical URL - Page content or complete HTML - Image URLs or link URLs - Robots, Open Graph, or JSON-LD content - Highlight selector, target descriptor, or matched count - Exact SEO score, score delta, or session baseline - Copied report text or clipboard contents - Recommendation evidence - Raw scan results or Page Facts - Browsing or search history - Email, account details, authentication data, or personal identity Analytics requests are sent to Mixpanel's Track API at `https://api.mixpanel.com/track` with IP-based geolocation enrichment disabled. Analytics is best-effort; failures are discarded and do not affect product functionality. Mixpanel acts as a third-party analytics service and processes the limited event data according to its own terms and privacy practices. ## Local Storage Persistent `chrome.storage.local` is limited to: - `preferredLocale` - `analyticsDistinctId` Short-lived `chrome.storage.session` is limited to the Fix & Rescan baseline described above. RankFlow AI does not persist full scan results, page content, recommendations, Page Facts, or copied reports. Users can remove persistent extension data by removing RankFlow AI or clearing its storage through browser controls. Removing this data may reset the language preference and generate a new anonymous analytics ID on later use. Session baselines are cleared with the browser session. ## Data Sale, Advertising, and Identity RankFlow AI does not sell personal data, build advertising profiles, create user accounts, collect authentication information, or use Mixpanel People Profiles. It does not attempt to identify users from browser profiles, hardware, page URLs, domains, or browsing activity. ## Permissions and Security RankFlow AI uses Manifest V3, minimum permissions, on-demand script injection, locally bundled code, and no remote executable code. Its only host permission is the scoped Mixpanel API endpoint used for the limited anonymous analytics described above. Version 1.1.0 adds no permissions. ## Policy Changes This policy may be updated when RankFlow AI's implemented behavior changes. Material changes will be reflected in release documentation and the published policy. The policy will not describe capabilities or data practices that are not implemented. ## Contact Privacy questions can be sent through the support contact published with the RankFlow AI Chrome Web Store or Microsoft Edge Add-ons listing.