Privacy
Last updated October 19, 2026.
AEO Inspector is run by Orion CMD LLC, Omaha, Nebraska. This page lists everything the service stores and for how long. Questions: hello@aeoinspector.com.
No accounts
There are no sign-ups, passwords or user profiles. We don't use analytics, ad trackers or third-party scripts, and the pages run without JavaScript.
What we store
| What | What's in it | How long |
|---|---|---|
| Check and report results | The URL you checked and what we found on that site (scores, checks, fixes, crawled page data) and, for reports, the AI engines' answers. Saved at a random link (/r/…). | 30 days, then deleted automatically |
| Re-check cache | A hash of the checked URL pointing to its latest result, so re-checking the same URL is free. | 24 hours |
| Badge record | The latest score for a domain, used by the public /badge/<domain>.svg image. | 30 days after the last check of that domain |
| Free-check counters | Daily counters keyed by a SHA-256 hash of your IP address (for IPv6, the /64), of your network (/24 or /48) and of your browser's random ID. The IP address itself isn't stored. | Deleted within 48 hours |
Cookie aeo_fc | A random ID with a signature, set when you run a free check, so we can count 1 free check a day per browser. HttpOnly, Secure, SameSite=Lax. It holds nothing else, and it's the only cookie we set. | 400 days in your browser (you can delete it any time) |
| Weekly tracking | The tracked URL, the email address you gave, the weekly results, and a log of the alert emails we sent (time, type, delivered or not). | 120 days after the last update |
| Usage stats | Daily totals only: number of free checks, re-checks, blocked checks, paid scans and reports, and engine spend. No IP addresses, URLs or personal data. | Kept as daily totals |
| Service logs | Cloudflare Workers logs of events such as the checked host, the score and errors. | Up to 7 days (Cloudflare's limit) |
Anyone who has a result link can open it, so treat it like any link you share. Free check results can be indexed by search engines if the link is published; paid report and tracking pages are marked noindex.
Who else handles data
- Cloudflare hosts the site and stores the data above (Workers, KV and Durable Objects). Like any web host, it processes your IP address to deliver pages. Tracking alert emails are sent through Cloudflare's email service from alerts@aeoinspector.com.
- Third-party AI engines. The live sample on a free check asks Perplexity one question about the checked site's category. The full report sends 5 category questions, 3 times each, to 16 engines (ChatGPT, Microsoft Copilot, Gemini, Claude, Grok, Google AI Overviews, Google AI Mode, Perplexity, Meta AI, DeepSeek, Qwen, Mistral, GLM, MiniMax, Exa Answer and You.com), through API providers including OpenRouter, xAI, DataForSEO, cloro, AnyAPI, Exa and You.com. The questions contain the checked site's brand, category and domain, not your IP address or email.
- The sites you check. We fetch the site you enter, as a browser and as AI crawlers, from Cloudflare's network.
- Payments. Paid scans, reports and tracking are paid in USDC on Base over x402, settled through Coinbase's CDP facilitator. These are public blockchain transactions; we don't store your wallet address in our own records. When card checkout launches, Lemon Squeezy will be the merchant of record for card payments and will handle card and billing details. Card checkout isn't live yet.
Your choices
Every tracking email has a link to stop emails. To have a result, tracking record or email address deleted before it expires, email hello@aeoinspector.com with the link.