SEO Leaderboard

Privacy

SEO Leaderboard has no accounts and no sign-up, so there is almost nothing here. This page says exactly what is stored and for how long.

What is never collected

  • No accounts, names, or email addresses. There is nothing to sign up for.
  • No analytics, no advertising, and no third-party tracking scripts of any kind.
  • No raw IP addresses are ever written down.

Submitting a domain

Anyone may submit five domains an hour. Enforcing that needs some way to tell one visitor from another, so the request’s IP address is combined with a secret and hashed, and only a short piece of that hash is stored. The address itself is never saved and the hash cannot be turned back into one. Those rows are deleted after 24 hours; the limit itself only ever looks one hour back.

What is public

Submitted domains, their scores, and when they were last analyzed appear on the Leaderboard and stay there. That is the point of the site. Nothing identifies who submitted a domain, because that was never recorded.

Cookies and local storage

  • One cookie exists, and it belongs to whoever runs the site. It carries no visitor information and is set only by signing in to owner mode, so no consent banner is needed.
  • A light or dark choice is kept in your browser’s local storage and is never sent to the server.

Other people’s websites

Scoring a domain means fetching its pages. The crawler names itself, obeys robots.txt, and stores what it measured rather than copies of pages. What IndexBot is covers it, including how to keep it out.

Getting in touch

Questions about any of this, or a request to have a domain taken off the Leaderboard, go to bot@seoleaderboard.com.

IndexBot

IndexBot is the crawler behind SEO Leaderboard. It visits a website only when someone submits that domain, reads it the way a search engine would, and leaves.

What it does

  • Fetches the homepage, robots.txt, the sitemap, and up to 24 more pages, at most four at a time.
  • Reads raw HTML only. It runs no JavaScript and loads no images, fonts, or scripts.
  • Visits a domain at most once every 24 hours, however many people submit it.
  • Stores what it measured, never full copies of pages.

How it identifies itself

Mozilla/5.0 (compatible; IndexBot/1.0; +https://seoleaderboard.com/bot)

How to let it in

Bot protection often turns IndexBot away before it reads anything, and the domain then cannot be scored. If you run the site, allow the User-Agent IndexBot. In Cloudflare that is a WAF skip rule; most other tools have the same idea under a different name.

(http.user_agent contains "IndexBot")

IndexBot has no fixed IP range to allow instead, so the User-Agent is the only thing to match on. It never tries to disguise itself as a browser, and the limits above are the whole of what it asks for.

How to keep it out

IndexBot obeys robots.txt. Add this and it will not read your site, and your domain cannot be scored.

User-agent: IndexBot
Disallow: /

Questions

Write to bot@seoleaderboard.com.