What this tool collects
Scout is a free tool with a short list of data behind it. This page is that list. Last updated 1 November 2026.
When you run a report
We store the website address you entered, the market and depth you chose, the report that came back, and what the run cost us. We also store a one-way hash of your IP address - not the address itself - so the same visitor cannot start unlimited paid runs (3 a day without an email, 10 with one). The hash cannot be turned back into an address.
Run data is deleted automatically after 90 days. Data we fetch about a domain from our search-data provider is reused for up to 7 days, so re-running the same site costs nothing, and is deleted on the same schedule.
When you unlock a report
We store the email address you give us, your name and company site if you fill them in, the domain the report was about, and whether you ticked the marketing box. We store the exact sentence you were shown next to that box - "Send me occasional CoreAEX tips on content and SEO. Unsubscribe any time." - together with the time, because consent that cannot be reproduced word for word is not evidence of consent.
We use your email to send you that report. We only send anything else if you ticked the box. To stop marketing emails, reply to any of them or write to zarko@coreaex.com. We do not sell or share your details.
Unlocking sets one cookie. It is httpOnly (JavaScript on the page cannot read it), it holds a signed reference to your lead record and nothing else, and it lasts30 days. It exists so you are not asked for your email again on your next visit. There are no advertising or analytics cookies on this tool, and no third-party tracking scripts - you type other people's domains into this thing, and that is nobody else's business.
If you connect another account
If you connect Google Search Console, we store a token that lets us read your search query data - read only, and nothing outside Search Console. If you connect an Ahrefs key, we store that key. Both are encrypted at rest and are used only while one of your own runs is executing. Disconnecting revokes them immediately.
Who else sees it
- DataForSEO - receives the domains and keywords we look up. It does not receive your email.
- Anthropic - receives your homepage text and keyword lists to sort them. It does not receive your email.
- Google - delivers the report email, and holds the leads sheet.
- Cloudflare Turnstile - checks the Run button is a person, not a script.
- Our database is hosted by Neon, in the United States.
Having it deleted
Email CoreAEX and ask, from the address you signed up with. We will delete your lead record and any connected credentials. Run data older than90 days is already gone.
Data: DataForSEO