Privacy Policy

Last updated October 26, 2026. How Scrape Everything collects, uses and protects personal data.

In short: we collect what we need to run the Service: the basic profile Google or GitHub shares when you sign in, your request history and your payment records. With your consent we also use Google Analytics and Google Ads to measure our website and advertising. We do not sell personal data, and you can ask us to export or delete your data at any time.

01Who we are

Scrape Everything is operated by Senyo Labs Technology, Finanskent Mah. Prof. Hasan Küçük Cad. Sinpaş Finans Şehir 9. Blok No: 5 İç Kapı No: 5, Ümraniye/İstanbul, Türkiye ("we", "us"). We provide the website at scrapeeverything.com, the dashboard, the playground and the API (together, the "Service") and are responsible for the personal data described in this policy. Questions and requests: info@scrapeeverything.com.

02Data we collect

When you use the Service we collect:

Account details from Google or GitHub: your name, email address, profile photo and the account ID of the provider you sign in with. We do not receive your password or access to any other data in those accounts.
Sign-in and security data: the IP address and browser of each signed-in session, the IP address you signed up from and when you last signed in.
API keys: the name you give each key, its first characters, a one-way fingerprint (the key itself is never stored in readable form), the IP addresses you allow, and when and from which IP address it was last used.
Request history: the endpoint, the target you asked for (for example a username or link), time, status, credits charged and the IP address the request came from.
Payment records: the package, amount, currency, status and the payment provider's reference. Crypto payments are handled by 2328; we never see or store your wallet keys.
Attribution and referral data: when you arrive through a referral link, the referral code; and, if you consent to analytics or advertising cookies, the campaign parameters and ad click IDs of the link you arrived from (for example utm_source or gclid), the referring site and landing page. We store these with your account when you sign up, to credit referrals and measure which campaigns bring customers.
Referral program records: who referred you, rewards earned and their status.
Email preferences: whether you turned off non-transactional emails.
Messages you send us, for example support tickets and emails, and requests you send through our data subject form.

03Public data we process for you

At your request, the Service retrieves publicly available information from third-party platforms, such as profiles, posts, comments and media. This can include personal data of the people who published it. We process it only to deliver your request and keep a copy in the results cache for up to 14 days so you can reuse it (see caching). We do not use it for any other purpose, combine it into profiles or sell it.

You decide what to request and how you use the results, so you are responsible for having a lawful basis for that use (see section 5 of the Terms of Service). If the Service returned public data about you and you want cached copies removed, use our data subject request form or email info@scrapeeverything.com with the link or username and we will delete them.

04How we use data

We use personal data to:

create your account, sign you in and keep your session secure;
run your requests, show your usage and charge credits;
process payments and keep accounting records;
prevent fraud and abuse, for example by limiting free signup credits per network and by rate limiting;
answer support requests and tell you about important changes to the Service;
send account and product emails. Registered users receive account and product emails, including onboarding tips and occasional product news. Every non-transactional email has a one-click unsubscribe link, and you can turn them off in Settings at any time;
run the referral and bonus programs;
with your consent, measure how our website is used (Google Analytics 4) and how our ads perform (Google Ads), including purchase events that our servers send to Google Analytics for crypto payments;
comply with legal obligations.

We do not sell personal data. We do not use the public data you request through the API for our own advertising or analytics.

05Legal bases

Where the law requires a legal basis for processing (for example the EU and UK GDPR or the Turkish Personal Data Protection Law No. 6698, KVKK), we rely on the performance of our contract with you (running your account and requests), our legitimate interests in securing the Service and preventing abuse, compliance with legal obligations such as tax and accounting rules, and your consent where we ask for it, which you can withdraw at any time.

We share personal data only with providers that help us run the Service, and only what they need:

Google and GitHub, to sign you in;
2328, our payment processor for crypto payments, when you buy credits;
Cloudflare, which delivers and protects our websites and API, including Cloudflare Turnstile, the bot check on our demo and free tools;
Google (Google Tag Manager, Google Analytics 4 and Google Ads), only if you consent to analytics or advertising cookies; we use Consent Mode v2, which is set to "denied" until you choose;
our email provider, to send account, transactional and product emails;
the hosting and infrastructure providers that run our servers and backups.

Requests to third-party platforms are made by our servers; your account details are not sent to them. We may also disclose data when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to apply. We do not sell or rent personal data.

07Cookies and local storage

We use strictly necessary cookies to run the Service, and analytics and advertising cookies only if you agree in our cookie banner. You can change your choice at any time with "Cookie settings" in the footer. Google Analytics and Google Ads load through Google Tag Manager with Consent Mode v2: until you consent, their consent state is "denied".

Cookie	Purpose	Duration	Consent needed
Session cookie (ss_session)	Keeps you signed in	Up to 30 days after your last visit, at most 90 days	No (necessary)
Sign-in protection (ss_oauth)	Protects the Google or GitHub sign-in step	10 minutes	No (necessary)
ss_signed_in	Records only that you are signed in, so public pages can show a Dashboard button	Same as your session	No (necessary)
se_login, se_signup	One-time marker after sign-in so the dashboard can record a sign-up or login event	10 minutes	No (necessary)
se_consent	Stores your cookie choice	180 days	No (necessary)
se_ref, se_ref_hint	Referral code from a referral link, so the referrer can be credited	60 days	No (needed for the referral program you arrived through)
se_attr	First visit: landing page, referring site and campaign parameters	60 days	Yes (analytics or advertising)
se_click	Last ad click: ad click IDs and campaign parameters	90 days	Yes (advertising)
_ga, _ga_*	Google Analytics 4: counts visits and measures how the site is used	Up to 2 years	Yes (analytics)
_gcl_*	Google Ads: measures which ads lead to sign-ups and purchases	Up to 90 days	Yes (advertising)
Cloudflare cookies (for example __cf_bm, cf_clearance)	Bot and abuse protection, including Turnstile on the demo and free tools	Up to 30 minutes to 1 year, set by Cloudflare	No (necessary for security)

Your light or dark theme choice and some interface settings (for example a dismissed banner, or a short-lived demo session after a bot check) are saved in your browser's local or session storage. Our fonts are served from our own servers.

08How long we keep data

Account details: while your account is open. When you ask us to delete your account, we delete or anonymize your personal data within 30 days, except records we must keep by law.
Request history: 180 days.
Cached results: up to 14 days.
Sessions: until they expire or you sign out, at most 90 days.
Payment records: as long as tax and accounting laws require.
Attribution data: stored with your account while it is open; the cookies expire as listed above.
Data subject requests: as long as needed to handle the request and show that we did.
Security and technical logs: as long as needed to protect the Service and investigate abuse.

Backups are overwritten on a regular cycle.

09Security

We protect data with encrypted connections (HTTPS), store API keys and session tokens only as one-way fingerprints, encrypt stored credentials and limit access to the people who need it to run the Service. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

10International transfers

We and our providers may process data in countries other than the one you live in, including the countries where Google, 2328 and Cloudflare operate. Where required, we rely on appropriate safeguards such as our providers' standard contractual clauses.

11Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you and receive a copy in a portable format;
correct inaccurate data;
delete your account and personal data;
object to or restrict certain processing;
withdraw consent where we rely on it.

To use these rights, email info@scrapeeverything.com from the address linked to your account. We may need to verify your identity and will reply within 30 days. You can also complain to your local data protection authority.