Your browser, your evidence, your connections.

Page data used for analysis

The extension reads supported active-page content to produce reports: URL, page title and description, headings, visible text, image attributes, links, robots directives, canonical and detected structured or social markup. Saved reports and comparison snapshots can contain this page content.

Local analysis needs no DTCUP account. Reports, comparison records and preferences stay in your browser profile unless you export them or explicitly use an optional connection. Only analyze or export private content you are allowed to handle.

Network checks and optional search tools

Requested network checks contact the selected website and bounded document or resource URLs. Probes omit cookies and HTTP credentials. Search tools read supported results rendered in the current Google page; detection may vary as that page changes.

The extension needs website access for page inspection and optional toolbar or search features. Chrome enforces access restrictions. Automatic analysis and overlays can be enabled or disabled in settings.

Semrush and Ahrefs connections

Provider connections are optional and use your own authorized API access. Explicit report requests send the selected URL, domain or keyword and parameters directly to that official provider API. Its own policies govern logging, retention, plan restrictions and charges.

Credentials are encrypted in the extension's local storage. The encryption key is stored separately in the same browser profile and is non-exportable through the Web Crypto API. Credentials persist across browser restarts until you disconnect. This protects stored values; software or a person controlling your browser profile may still be able to use an active connection.

DTCUP does not upload provider API keys to its account service, include them in ordinary settings exports or provide shared provider credits. Provider revocation, changed permissions, clearing browser data or losing the local key may require reconnecting.

Optional personal DTCUP account synchronization

Sign-in and registration use the existing dtcup.com account service. Site Analyzer does not create a separate account system. Your explicit approval of a short-lived, single-use handoff pairs the website session or approved extension with that DTCUP user.

The account service stores your user ID, allowlisted preferences, settings revision, hashed authorization records and provider connection status last reported by the paired extension. A display name identifies your signed-in account. The dashboard exposes only that user's preferences.

Provider keys, page reports, captured page text and comparison snapshots are excluded from this synchronization. Device authorization is encrypted locally; server records hold token hashes. A device connection has no routine automatic expiry and can be revoked by manual disconnect or account security actions. The website dashboard session is time limited.

Dashboard connection status is reported by the paired extension, not proof of a fresh provider authorization check. Website sign-out and provider disconnect are separate controls.

Website storage and requests

Public product, installation and privacy pages run no application scripts and send no page-analysis content. Choosing a language opens the corresponding static English or Simplified Chinese page.

The private dashboard keeps its short-lived session and pending sign-in state in sessionStorage. Its localStorage caches ordinary preferences by DTCUP user ID and the public language choice, without credentials. Settings requests go to analyzer.dtcup.com through bearer authorization and a separate request token; the unified identity handoff uses dtcup.com; dashboard responses use no-store headers. The settings API uses the request IP address for short-lived, in-memory security rate limits. DTCUP Site Analyzer does not access GPS coordinates or infer your geographic location. Hosting infrastructure may retain ordinary request metadata, such as IP address, path and time, under its operational policies.

Retention and deletion

Local reports and comparison records remain until removed, extension data is cleared or the extension is uninstalled. Exported files remain at your chosen location and must be deleted separately. Provider disconnect removes the stored connection. Disconnecting DTCUP sync revokes the current device's authorization and removes its local authorization record.

Signing out ends the dashboard session. Uninstalling does not automatically erase synchronized account preferences. For access, correction or deletion of DTCUP account data, contact admin@dtcup.com through a channel that lets us verify ownership.

Scope and external services

This policy covers DTCUP Site Analyzer and analyzer.dtcup.com. DTCUP login and external services also have their own terms and policies. Review the Semrush privacy policy or Ahrefs privacy policy before enabling those services.

We update this page when product data handling changes. The date and version identify the documented release.